Latest AI JobsBrowse Jobs
Runlayer logo

Member of Technical Staff - Security Research

RunlayerHybrid NYC / Remote (US Timezones)Engineering
Apply on company site
Salary
Not listed
Job type
Full-time
Work mode
Remote
Posted
28 Sept 2026
Status
Open · checked 7d ago

About this role

Role Overview

The Member of Technical Staff - Security Research role at Go all in on AI is an exciting opportunity for an experienced professional to uncover critical vulnerabilities and publish industry-leading security research. Based as a hybrid position in New York City or available remotely across US timezones, this role is tailored for individuals with a strong background in offensive security who want to define the future of AI agent safety.

Key Responsibilities

Discover and exploit security flaws across Model Context Protocol (MCP) servers, client applications, AI coding frameworks, agent plugins, and associated OAuth pathways.
Manage the complete lifecycle of coordinated vulnerability disclosures, from initial contact and CVE assignment to advisories, embargoes, and public releases.
Produce influential technical content, including deep-dive write-ups, open-source security tools, and conference presentations.
Execute large-scale ecosystem scans across thousands of MCP servers leveraging proprietary catalogs and scanning infrastructure.
Translate discovery insights directly into platform protections, scanner rules, detection mechanisms, and public risk ratings.
Engage with enterprise customers, prospective clients, and media representatives alongside marketing and developer relations teams.
Contribute security findings directly to the MCP specification development process and broader industry frameworks.

Requirements

Minimum of 5 years of professional experience focusing on offensive security research, vulnerability research, or red teaming.
A documented public portfolio of security contributions, such as assigned CVEs, advisory publications, conference talks, or open-source tools.
Deep technical knowledge of agent-native attack vectors, including indirect prompt injection via tool outputs, tool poisoning, cross-server shadowing, OAuth confused deputy scenarios, and supply-chain vulnerabilities in skills and plugins.
Strong development capabilities in languages like Python, TypeScript, or Go to build custom testing harnesses, fuzzers, and scanners.
Excellent communication skills for crafting clear technical documentation suited for engineers and security leaders.
Mature judgment regarding responsible vulnerability disclosure, especially when interacting with resistant vendors.
Daily familiarity with AI agents, using them effectively as both operational tools and security targets.

Nice to Have

Prior published research specifically covering LLM, agent, or MCP security topics.
Professional background working on a security vendor research team or within an offensive security consultancy.
Experience delivering presentations at major security conferences such as Black Hat, DEF CON, or RSA.
Established professional relationships with vendor security response teams and prominent security journalists.
Development and maintenance of open-source security tools utilized by an active user base.

Skills and Tools

Python
TypeScript
LLM security frameworks
dbt ecosystem
MCP servers and clients
OAuth authentication flows
Custom fuzzers, scanners, and harnesses

Salary and Benefits

Competitive salary and equity package aligned with technical expertise and customer-facing responsibilities.
Comprehensive health, dental, and vision insurance coverage.
Generous paid time off policy covering vacation days, sick leave, and parental leave.
Dedicated professional development budget designated for conferences, educational courses, and certifications.
Choice of top-tier laptop and accessories to build an optimal remote or hybrid workspace.
Direct customer interaction opportunities with innovative enterprise companies.

About the Company

Go all in on AI is transforming enterprise operations by enabling companies to deploy AI agents, tools, and workflows safely and at scale. Founded by industry pioneers who built AI Actions for OpenAI, shipped Zapier Agents, and launched the first remote MCP server with Anthropic, the organization provides a unified platform for MCPs, Skills, and Agents featuring fine-grained governance and complete observability. Backed by a $30M Series A led by Felicis alongside Khosla Ventures, the company has raised $42M total and is trusted by leading enterprise innovators including Gusto, Instacart, Opener, dbt Labs, and Decagon.

How to Apply

Interested candidates should visit the official Go all in on AI careers page or reach out directly via the provided company contact email to submit their application details.

Skills and tech stack

PythonTypeScriptLLMdbt

Questions candidates ask

What is the location of the Member of Technical Staff - Security Research position?

The role is offered as a hybrid position based in New York City or as a remote position across US timezones.

How many years of experience are required for this role?

Candidates must have 5 or more years of experience in offensive security research, vulnerability research, or red teaming.

What programming languages are needed for the position?

Applicants should be able to write code in Python, TypeScript, or Go to build custom harnesses, fuzzers, and scanners.

What benefits and perks are provided?

The company offers competitive salary and equity, comprehensive health benefits, paid time off, professional development budgets, choice of top-tier equipment, and direct customer interaction opportunities.

Who leads or backs Go all in on AI?

The company recently raised a $30M Series A led by Felicis with participation from Khosla Ventures, bringing total funding to $42M.

Ready to apply?

The application is on the official Runlayer careers page.

Apply on company site