Senior Security Software Engineer (Sandbox Platforms)

Join our team as a Senior Security Software Engineer, where you will design, build, and harden process sandboxes across Linux, macOS, and Windows. This deep systems role requires a strong understanding of attack surfaces, threat models, and the boundary between trusted and untrusted code. You will work with platform primitives, define communication paths, reduce attack surfaces, and make engineering tradeoffs between isolation strength, performance, compatibility, and maintainability. A strong background in OS security models, systems programming, and attack surface analysis is required.

Responsibilities

• Design, build, and harden process sandboxes across Linux, macOS, and Windows, ensuring they serve as the last line of defense against untrusted code.
• Define and lock down every communication path in and out of the sandbox, minimizing exposure and reducing the attack surface.
• Write threat models, review designs, and respond to sandbox escapes and hardening findings, ensuring a robust security posture.
• Sound judgment on tradeoffs: knowing when tighter isolation is worth the cost and when it isn't

Requirements

• Deep, hands-on knowledge of the OS security model on at least one of Linux, macOS, or Windows, and the sandboxing primitives that platform provides
• Fluency in the boundary between sandbox and host (brokers, IPC, syscall filtering, privilege separation) and how to design a minimal, well-audited interface
• Systems programming in C, C++, or Rust; comfort at the syscall and kernel-interface level
• A security mindset: you default to least privilege and distrust every input crossing the boundary
• Strong grasp of attack surface analysis: how sandboxes are escaped and how to shrink the ways in

Kernel, hypervisor, or low-level OS internals work

• Experience across more than one of the three platforms
• Fuzzing, exploit development, or red-team experience against isolation boundaries

Pay

USD 269,170 - 326,060