Security Engineer

Job Summary

Seeking a full-time Security Engineer to join a hybrid team, responsible for building security scanning and detection products to protect enterprise AI, including ownership of Runlayer Watch products and AppSec for the platform.

Key responsibilities

• Build and improve Watch products for static and dynamic scanning of MCP servers and agent behavior detection
• Develop shadow detection for identifying unregistered MCP servers and agents operating outside governance
• Own AppSec for the platform, including penetration testing, vulnerability management, and security hardening

Required qualifications

• 8+ years of experience in security engineering with a focus on application security and security tooling development
• Proven experience in creating scanning or detection systems, including parsers and analysis pipelines
• Strong Python skills, particularly with Python/FastAPI
• Understanding of API and gateway attack patterns, including SSRF and supply-chain attacks
• Awareness of emerging AI/LLM security threats such as prompt injection and tool poisoning