Member of Technical Staff – Security

About the role

Runlayer is building a security layer for AI agent infrastructure. As a Member of Technical Staff – Security you will join the founding team and own the Runlayer Watch products that protect enterprise AI deployments.

Key responsibilities

• Design, build, and improve static and dynamic scanning tools for MCP servers, skills, plugins, and agent behavior detection.
• Develop shadow detection systems to identify unregistered agents and servers operating outside governance.
• Create CI/CD‑integrated security checks that run on every new version, skill update, or plugin release.
• Extend detection coverage to CLI agents (Codex, OpenCode) and browser‑based agents.

Required profile

• 8+ years of engineering experience building security tooling or endpoint detection products.
• Proven ability to create scanning or detection pipelines, parsers, and rule engines.
• Experience with shadow IT detection, asset discovery, or enterprise endpoint monitoring.
• Strong understanding of API and gateway attack patterns such as SSRF, token theft, injection, and supply‑chain attacks.

Required skills

• Python
• FastAPI
• Security scanning and detection
• API security concepts

What we offer

• Competitive salary and equity package.
• Paid time off, including vacation, sick leave, and parental leave.
• Professional development budget for conferences, courses, and certifications.
• Top‑tier equipment and comprehensive health, dental, and vision benefits.