runlayer - Member of Technical Staff - Security Research
Requirements
• 5+ years in offensive security research, vulnerability research or red teaming • A public record: CVEs or advisories, conference talks, or published tools and write-ups • Depth in agent-native attacks: indirect prompt injection through tool output, tool poisoning, cross-server shadowing, confused deputies through OAuth, supply-chain attacks on skills and plugins • Builder, not just breaker: you write Python, TypeScript or Go for harnesses, fuzzers and scanners. • Clear writing for engineers and security leaders alike • Sound disclosure judgment, including with vendors who push back • AI-native: you use AI agents every day, as tools and as targets • Published research on LLM, agent or MCP security • Time on a security vendor's research team or at an offensive security consultancy • Talks at Black Hat, DEF CON, RSA or similar • Relationships with vendor security response teams and security press • Open-source security tools with real users
Responsibilities
• Find and exploit vulnerabilities in MCP servers and clients, AI coding agents, agent frameworks, skills and plugin marketplaces, and the OAuth flows between them • Run coordinated disclosure end to end: vendor contact, CVEs and advisories, embargoes and publication • Publish research people quote: technical write-ups, open-source tools and conference talks • Run ecosystem-scale studies across thousands of MCP servers using our catalog and scanning pipeline • Turn findings into product: detections, scanner rules and public risk ratings for MCP servers • Brief customers, prospects and press with our marketing and developer relations teams • Bring what you find into MCP specification security work and industry frameworks • Paid time off — paid vacation, paid sick leave, and paid parental leave. • Professional development — budget for conferences, courses, and certifications in AI, enterprise software, and customer success. • Top-tier equipment — your choice of laptop and accessories to create your ideal work environment. • Health benefits — comprehensive health, dental, and vision coverage. • Customer interaction opportunities — work directly with innovative companies and see the immediate impact of your work. • Not quite the right fit? Reach out to [email protected] [email protected] with details about your experience and interests.
Benefits
• Impact: Your findings shape how enterprises, vendors and standards bodies think about agent security, and they ship as protections for our customers • Excellence: Work with the team that helped establish MCP and a group of senior engineers from top security backgrounds • Ownership: Own the research agenda end to end, from the first bug to disclosure, publication and the stage • We provide a competitive package designed to attract and retain top talent who can work effectively with enterprise customers.
Apply in one click
Upload My Resume
Drop here or click to browse · Tap to choose · PDF, DOCX, DOC, RTF, TXT