What You'll Do
- Build and improve Watch products: static and dynamic scanning for MCP servers, skills, plugins, and agent behavior detection on endpoints
- Develop shadow detection: identify unregistered MCP servers, skills, plugins, and agents running outside governance across the enterprise
- Own AppSec for the platform: penetration testing, vulnerability management, dependency scanning, and security hardening of the control plane
- Build automated version scanning: CI/CD-integrated security checks that run on each new MCP server version, skill update, or plugin release
- Extend detection coverage to CLI agents (Codex, OpenCode) and browser-based agents
Responsibilities
- Build and improve Watch products: static and dynamic scanning for MCP servers, skills, plugins, and agent behavior detection on endpoints
- Develop shadow detection: identify unregistered MCP servers, skills, plugins, and agents running outside governance across the enterprise
- Own AppSec for the platform: penetration testing, vulnerability management, dependency scanning, and security hardening of the control plane
- Build automated version scanning: CI/CD-integrated security checks that run on each new MCP server version, skill update, or plugin release
- Extend detection coverage to CLI agents (Codex, OpenCode) and browser-based agents
Qualifications
- 8+ years in security engineering with deep experience in application security, security tooling development, or endpoint detection
Required Skills
- Builder, not operator. You've created scanning or detection systems: parsers, rule engines, analysis pipelines.
- Experience with shadow IT detection, asset discovery, or endpoint monitoring in enterprise environments
- Strong Python skills (our scanning pipeline and platform backend are Python/FastAPI)
- Understanding of API and gateway attack patterns: SSRF, token theft, injection, supply-chain attacks
- Awareness of emerging AI/LLM security threats: prompt injection, tool poisoning, jailbreaking, indirect prompt injection through tool responses
Staff Identity Engineer in remote at Unknown Company
This position is listed as full time and onsite.