Software Engineer Sandboxing

You will design, build, and operate sandboxed environments for untrusted model-generated code and tool calls. You will improve isolation boundaries, build scheduling and lifecycle systems, instrument for observability and abuse detection, and own platform reliability and performance from APIs to virtualization.

Responsibilities

• Design, build, and operate sandboxed execution environments for untrusted model-generated code and tool calls.
• Improve isolation boundaries using containers, microVMs, or gVisor-style kernels.
• Build scheduling, resource-management, and lifecycle systems for sandboxes.
• Expose sandboxing primitives that are simple to use and hard to misuse.
• Instrument sandboxes for observability and abuse detection and respond to exploitation attempts.
• Own reliability and performance from API design to the virtualization layer.

Requirements

• Bachelor's degree or equivalent experience in computer science, engineering, or a similar field.
• Proficiency in a backend programming language.
• Experience building or operating isolation or virtualization technology, such as containers, microVMs, or sandboxed runtimes.
• Knowledge of Linux isolation internals, including namespaces, cgroups, seccomp, capabilities, and networking.
• Ability to work across the stack and own projects end to end.
• Experience collaborating with cross-functional partners and subject-matter experts.

Benefits

• Health, dental, and vision benefits.
• Unlimited PTO.
• Paid parental leave.
• Relocation support as needed.