Runlayer
Member of Technical Staff - Security
Hybrid NYC / Remote (US Timezones) · Staff+
Sponsorship not specifiedDetected 29 days ago
PythonFastAPICI/CDdbtLLMsAgentic AICybersecurityPenetration TestingDetection Engineering
About the role
- Excellence: Work alongside founders from Zapier's AI team and a team of senior engineers from top cyber backgrounds
Responsibilities
- Build and improve Watch products: static and dynamic scanning for MCP servers, skills, plugins, and agent behavior detection on endpoints
- Develop shadow detection: identify unregistered MCP servers, skills, plugins, and agents running outside governance across the enterprise
- Own AppSec for the platform: penetration testing, vulnerability management, dependency scanning, and security hardening of the control plane
- Build automated version scanning: CI/CD-integrated security checks that run on each new MCP server version, skill update, or plugin release
- Build the security layer for the AI agent infrastructure category, directly shaping how enterprises adopt AI safely
- Own detection products end-to-end, from threat modeling through shipped features
- Looking for a security engineer, to join our small founding team, you'll build the security scanning and detection products that protect enterprise AI.
- You own the Runlayer Watch products (static and dynamic scanning), shadow detection of unregistered agents and servers, and AppSec for the platform itself.
- Impact: Build the security layer for the AI agent infrastructure category, directly shaping how enterprises adopt AI safely
- Ownership: Own detection products end-to-end, from threat modeling through shipped features
Requirements
- 8+ years in security engineering with deep experience in application security, security tooling development, or endpoint detection
- Experience with shadow IT detection, asset discovery, or endpoint monitoring in enterprise environments
Nice to have
- Experience with MCP, AI agents, or LLM security specifically
- Network in enterprise security (SVCI, Israeli security community, etc.)
- Professional development - budget for conferences, courses, and certifications in AI, enterprise software, and customer success.
- Customer interaction opportunities - work directly with innovative companies and see the immediate impact of your work.
Skills
- Already trusted by Gusto, Instacart, Opendoor, dbt Labs, Cursor, and Decagon.
- Agent operators on Runlayer grew 5x in four weeks while human operators stayed flat.
- AI is transforming how every company operates, but most enterprises are stuck.
- They want to move fast with AI Agents, tools, and workflows, but they can't do it safely.
- static and dynamic scanning for MCP servers, skills, plugins, and agent behavior detection on endpoints
- identify unregistered MCP servers, skills, plugins, and agents running outside governance across the enterprise
- Extend detection coverage to CLI agents (Codex, OpenCode) and browser-based agents
Compensation
- Competitive salary and equity — compensation that reflects your expertise and customer-facing responsibilities.
Benefits
- Competitive salary and equity - compensation that reflects your expertise and customer-facing responsibilities.
- Paid time off - paid vacation, paid sick leave, and paid parental leave.
- Health benefits - comprehensive health, dental, and vision coverage.
Apply directly at Runlayer →Create a free account for alerts like thisView Runlayer immigration profile
This listing is sourced directly from Runlayer's careers page and normalized into a canonical job model.