Senior Security Engineer, AI Platform Defense

Runlayer; New York (NY); Hybrid; USD 150,000 - 210,000; Full time

Benefits offered by this job

Competitive salary and equity

Paid time off

Professional development

Top-tier equipment

Health benefits

Customer interaction opportunities

Job summary

Runlayer is seeking a Security Engineer to join a small founding team and build security scanning and detection products protecting enterprise AI. You will own Runlayer Watch (static and dynamic scanning), shadow detection of unregistered agents/servers, and AppSec for the platform.

You’ll work with founders from Zapier's AI team and senior engineers from top cyber backgrounds, shaping how enterprises adopt AI safely with end-to-end ownership of detection features.

Qualifications

• 8+ years in security engineering with deep experience in application security, security tooling development, or endpoint detection.
• Builder, not operator. You've created scanning or detection systems: parsers, rule engines, analysis pipelines.
• Experience with shadow IT detection, asset discovery, or endpoint monitoring in enterprise environments.

Responsibilities

• Build and improve Watch products: static and dynamic scanning for MCP servers, skills, plugins, and agent behavior detection on endpoints.
• Develop shadow detection: identify unregistered MCP servers, skills, plugins, and agents running outside governance across the enterprise.
• Own AppSec for the platform: penetration testing, vulnerability management, dependency scanning, and security hardening of the control plane.
• Build automated version scanning: CI/CD-integrated security checks that run on each new MCP server version, skill update, or plugin release.
• Extend detection coverage to CLI agents and browser-based agents.

Skills

Security engineering

Application security

Endpoint detection

Python

FastAPI

Threat modeling

Tools

Python

FastAPI

Job description

Runlayer is seeking a Security Engineer to join a small founding team and build security scanning and detection products protecting enterprise AI. You will own Runlayer Watch (static and dynamic scanning), shadow detection of unregistered agents/servers, and AppSec for the platform.

You’ll work with founders from Zapier's AI team and senior engineers from top cyber backgrounds, shaping how enterprises adopt AI safely with end-to-end ownership of detection features.