Software Engineer, Sandboxing

2 hours ago

H1B Sponsor

Base Salary

$300k - $450k/yr

Responsibilities

Design, build, and operate sandboxed execution environments for untrusted model-generated code and tool calls at scale.
Improve isolation boundaries using containers, microVMs, and gVisor-style kernels while balancing security, startup latency, and throughput.
Build scheduling, resource-management, provisioning, reuse, and teardown systems for sandboxes under heavy concurrent load.
Partner with researchers and the Tinker product team to expose safe and usable sandboxing primitives.
Instrument sandboxes for observability and abuse detection and respond to escape or exploitation attempts.
Own sandboxing platform reliability and performance end to end, including API design and the underlying virtualization layer.

Bachelor's degree or equivalent experience in computer science, engineering, or a similar field.
Proficiency in at least one backend language, specifically Python or Rust.
Experience building or operating isolation or virtualization technology, including containers, microVMs, or sandboxed runtimes.
Strong knowledge of Linux isolation concepts including namespaces, cgroups, seccomp, capabilities, and networking.
Ability to operate across the stack and own projects end to end.
Experience securing systems that execute untrusted or adversarial code, including threat modeling and sandbox-escape hardening, is preferred.
Familiarity with large-scale, multi-tenant infrastructure on Kubernetes or similar orchestration systems is preferred.
Experience with performance-sensitive systems programming and reducing cold-start latency for ephemeral compute is preferred.
A track record of contributing to open-source infrastructure or security tooling is preferred.
Interest in AI-agent tool use and code execution and its implications for safe execution environments is preferred.

11-50 employees