15 hours ago
San Mateo, CA, USASenior
Base Salary
$269k - $326k/yr
Responsibilities
- Design and implement process sandboxes using Linux, macOS, and Windows platform security primitives.
- Define and minimize communication paths involving syscalls, IPC, shared memory, file descriptors, sockets, brokers, and other interfaces.
- Analyze and reduce kernel, broker, device-access, and side-channel attack surfaces.
- Balance isolation strength, performance, compatibility, and maintainability while documenting engineering decisions.
- Create threat models, review security designs, and respond to sandbox escapes and hardening findings.
Requirements
- Deep hands-on knowledge of the OS security model and sandboxing primitives on at least one of Linux, macOS, or Windows.
- Strong understanding of attack-surface analysis, sandbox escapes, and methods for reducing attack paths.
- Fluency in sandbox-host boundaries, brokers, IPC, syscall filtering, privilege separation, and minimal audited interfaces.
- Systems programming experience in C, C++, or Rust at the syscall and kernel-interface level.
- Experience making security tradeoffs and applying least-privilege principles to untrusted inputs.
Benefits
- Full-time employees are eligible for equity compensation and benefits.
- Office-based roles are onsite Tuesday, Wednesday, and Thursday, with optional presence Monday and Friday.
About Roblox
Roblox builds a platform for user‑generated 3D experiences, offering Roblox Studio for creators and a social marketplace where players explore and interact across devices. Its business model centers on virtual currency (Robux) and subscriptions, platform fees paid to creators, and an expanding advertising offering. Founded in 2004 and headquartered in San Mateo, California, Roblox Corporation is publicly traded on the NYSE under the ticker RBLX.