
How to Actually Get Hired
Who reads applications, which channel gets a reply, and what they screen for.
Don't make these mistakes
The single most common mistake with a team like this is confusing enthusiasm for the problem with relevant experience. Neal and Oleksandr have shipped production AI security infrastructure that serves millions of deployments. They will immediately distinguish between someone who has read about endpoint security and someone who has worked in it. Generic interest in "AI safety" or "the importance of securing AI systems" reads as noise to a team that has already built and shipped in this space. Lead with something specific: a threat model for a specific agent-action scenario, a design document for endpoint telemetry architecture, or a competitive analysis of where Manifold fits against the incumbent EDR vendors. The LLM Guard repository and the press release from today are the two documents that will give you the language and the technical framework to make that contact land.
What gets their attention
Manifold's funding announcement landed this morning. There are no job listings anywhere: no careers page, no Wellfound, no LinkedIn jobs. The company is literally hours old as a public entity. The press release described the funding as being used "to fuel the development of Manifold's agentic AI Detection and Response platform", that means engineering, research, and product hires are imminent. The founders previously built Laiyer AI together, whose LLM Guard product became the most widely adopted open-source LLM firewall in existence, and which was acquired by Protect AI (subsequently acquired by Palo Alto Networks). That exit track record means they've been through a hiring cycle before, they know what they need, and they're not going to spend $8M slowly. Costanoa Ventures is the firm behind Tines, Kustomer, and Credo AI, all companies that build infrastructure for trust, automation, and governance in enterprise tech. Their investment thesis here is enterprise security infrastructure for the AI agent era, and at this stage they push portfolio companies hard toward building the product, getting logos, and establishing technical credibility in the community. That means engineering velocity is the priority. Cherry Ventures has a strong track record in European deeptech infrastructure, and their participation alongside Costanoa signals confidence in the technical depth of the founding team. The specific involvement of Joe Sullivan and Vijay Bolina as angels will open enterprise security buyer doors, but it also signals that the product will need customer success and enterprise GTM support before long.
Why applying the normal way doesn't work
Manifold is <50 people. No recruiter, no HR. Your application goes to a founder juggling everything. Cold outreach is how you actually get seen.
Who to contact at Manifold
Founding team
Neal built the most widely adopted open-source LLM firewall in the world, watched it get acquired into Palo Alto Networks, and then concluded that everything he'd built was already insufficient for the next problem. That is the founder trajectory that produces genuinely category-defining companies: someone who solved the previous version of a problem at scale, saw the limitation of that solution, and built the next one. LLM Guard, the product he co-built at Laiyer AI, was downloaded 2.5 million times per month on HuggingFace before the acquisition. That is not a research project that got traction. That is production infrastructure that became the default choice for teams securing LLM applications. Neal understands what it takes for a security tool to achieve that kind of adoption because he did it once already. His intellectual shift from Laiyer to Manifold is specific and worth understanding before you contact him. LLM Guard secured the inference perimeter: it monitored what went into the model and what came out. That architecture made sense when AI systems were chatbots, tools that generated text and then stopped. It does not make sense for agents that execute shell commands, read codebases, make API calls, and take real-world actions after the inference point. Neal's argument is that the security industry has responded to the rise of agents by scaling the chatbot-era tools, adding more classifiers, more guardrails, more gateways, and that this approach is fundamentally blind to the actual risk surface. Manifold's bet is that you need a new category of tool designed specifically for the agent-action layer, not a retrofitted version of what worked for text generation. That is a precise and defensible thesis, not a general "AI security is growing" pitch. He is a European founder, educated at HEC Paris, based in the Berlin metropolitan area based on his LinkedIn profile, who has moved to San Diego to build Manifold with his co-founders. That geographic decision, choosing San Diego over San Francisco, signals a team that is building around specific people rather than chasing the Bay Area talent pool. His communication style, based on the public quotes available from the funding announcement, is direct and specific: he speaks in concrete technical problems, not in market size claims. "Every developer today has coding agents on their laptop with access to source code, production systems, and CI/CD pipelines connected to an expanding ecosystem of MCP servers, skills, and third-party tools that no one is inspecting" is a grounded, specific threat description, not a category headline. Match that register when you reach out.
Oleksandr co-built LLM Guard with Neal and is the engineering architect whose work made the most widely deployed open-source LLM firewall in the world actually run at production scale. He has been shipping AI security code in public, the LLM Guard GitHub repository is his most detailed public profile, which means you can read exactly how he thinks about security problems technically before reaching out. His work on LLM Guard covers input/output sanitisation, prompt injection detection, PII redaction, and real-time observability tooling, all built with the constraint that it had to work reliably in production environments across every major LLM provider. That background maps directly to the signal processing and detection architecture work at the heart of Manifold. His public LinkedIn profile is sparse by design. GitHub activity and the Laiyer/Protect AI codebase history are your best window into his thinking. For an engineering hire, he is the peer-level evaluator of your technical proof of work. A security research document or a minimal endpoint monitoring prototype that demonstrates you understand the detection problem at the agent-action layer will reach him far more effectively than a resume.
Michael met Neal and Oleksandr after the Laiyer AI acquisition, when all three were working inside Protect AI and watching the same pattern develop: the AI agent use case was expanding faster than any existing security tooling could accommodate, and the response from incumbent vendors was to retrofit chatbot-era tools for a fundamentally different problem. His specific role at Protect AI and before is less publicly documented than his co-founders', but his involvement from the inception of Manifold, not as a later addition, but as a co-founder at the point of the original thesis development, signals that he brings something the other two don't have: likely enterprise GTM and security customer-facing experience that balances Neal's product background and Oleksandr's engineering depth. For enterprise security GTM and solutions engineering roles, Michael is the most relevant first contact after Neal. Find him on LinkedIn by searching his name alongside Manifold Security.
What to show them
Manifold's core value proposition is understanding what AI agents actually do at the endpoint at runtime. That's a security research problem as much as an engineering one: you need to know what "normal" agent behaviour looks like, what compromise or manipulation looks like, and how to build detection logic that is specific enough to be useful and broad enough to catch novel attack patterns. The founders have this knowledge from their LLM Guard experience, but they need people who can extend it. Core skills: Endpoint security engineering, EDR internals, Python, agent behaviour analysis, LLM security (prompt injection, jailbreaks, supply chain attacks on models), MCP protocol understanding, detection rule writing, MITRE ATT&CK familiarity, low-level system monitoring (eBPF a strong plus) Proof of work: Write a one-page threat model for a coding agent (e.g., Cursor or Claude Code) operating on a developer's laptop with access to a production codebase and CI/CD pipeline. Identify the top three attack vectors, how could an attacker use that agent to do damage? For each one, describe what the detection signal would look like at the endpoint level and whether existing EDR tools would catch it. This proof of work demonstrates you understand both the attack surface and the detection gap that Manifold exists to fill.
A cold email that works at Manifold
What Manifold screens for
Manifold's funding announcement landed this morning. There are no job listings anywhere: no careers page, no Wellfound, no LinkedIn jobs. The company is literally hours old as a public entity. The press release described the funding as being used "to fuel the development of Manifold's agentic AI Detection and Response platform", that means engineering, research, and product hires are imminent. The founders previously built Laiyer AI together, whose LLM Guard product became the most widely adopted open-source LLM firewall in existence, and which was acquired by Protect AI (subsequently acquired by Palo Alto Networks). That exit track record means they've been through a hiring cycle before, they know what they need, and they're not going to spend $8M slowly. Costanoa Ventures is the firm behind Tines, Kustomer, and Credo AI, all companies that build infrastructure for trust, automation, and governance in enterprise tech. Their investment thesis here is enterprise security infrastructure for the AI agent era, and at this stage they push portfolio companies hard toward building the product, getting logos, and establishing technical credibility in the community. That means engineering velocity is the priority. Cherry Ventures has a strong track record in European deeptech infrastructure, and their participation alongside Costanoa signals confidence in the technical depth of the founding team. The specific involvement of Joe Sullivan and Vijay Bolina as angels will open enterprise security buyer doors, but it also signals that the product will need customer success and enterprise GTM support before long.
Customize your CV for the Manifold role. Matching the job description language helps clear ATS filters.
Mistakes that kill applications
A recycled CV gets rejected fast at Manifold (<50 people). They notice.
Don't open with what you want. Open with what Manifold is dealing with right now — The timing of this raise is not accidental, and what you'd do about it.
The wait-and-hope strategy fails. Follow up on day five — response rates roughly double.
Frequently asked questions
How do I apply to Manifold?
Through the roles on our Manifold jobs page, or directly to a founder or department head if you can reach them. At <50 people, direct outreach outperforms the form.
Does Manifold respond to cold emails?
Not enough data yet on Manifold's cold email response rates.
Who is the hiring manager at Manifold?
At this size, hiring is usually run by a founder or department head.
What ATS does Manifold use?
Manifold uses recruitee.
How competitive is it to get hired at Manifold?
Typical applicant count for B2B, Supply Chain and Logistics roles (<50 people): 50-100 in two weeks. Apply fast.
Have your application sent for you
We find roles at companies like Manifold within 48 hours of them appearing, build a CV tailored to the posting, and send it while you're still applicant number ten.
Get early access →