Software Engineer Sandboxing

Skills

About the Role

You will design, build, and operate sandbox infrastructure for untrusted model-generated code and agents. You will improve startup time, density, throughput, isolation, observability, reliability, and security while working across Linux, virtualization, containers, cloud platforms, and reinforcement-learning environments.

Requirements

• Experience in Linux systems programming, kernel development, or another low-level area
• Proficiency in Rust, C, C++, or Go
• Knowledge of virtualization or container isolation technologies such as KVM, QEMU, Firecracker, gVisor, or runc
• Understanding of Linux namespaces, cgroups, scheduling, and memory management
• Experience profiling and debugging system-level performance issues
• Ability to work in unfamiliar codebases and ship practical solutions
• Strong communication skills
• Bachelor’s degree or equivalent education, training, or experience

Responsibilities

• Design, build, and operate sandboxing infrastructure for untrusted code and agent workloads at scale
• Improve sandbox startup time, density, and throughput
• Strengthen compute, filesystem, and network isolation
• Investigate and fix kernel, hypervisor, and container-runtime performance, reliability, and security issues
• Build monitoring, tracing, and debugging tools for sandbox resource use
• Support fast, reproducible, isolated reinforcement-learning environments and evaluations
• Expose dependable sandbox capabilities for products and customers
• Threat-model, test, harden, and respond to sandbox escape and abuse scenarios
• Work with cloud providers on required hardware and platform features
• Share systems-programming knowledge and help set technical standards

Benefits

• Visa sponsorship efforts
• Optional equity donation matching
• Generous vacation
• Parental leave
• Flexible working hours