Running untrusted code and workloads safely, at scale, with robust isolation and data-security guarantees, is a hard and increasingly key problem in AI infrastructure. As a Sandbox Engineer, you'll build the isolated execution environments that make that possible.
What You'll Do
Build and maintain container and microVM-based sandboxing for customer code and SQL execution
Implement syscall filtering and container security hardening
Support strong multi-tenant isolation guarantees for concurrent customer workloads
Partner with our security function on data-egress monitoring and isolation requirements
Continuously test and harden the platform's resistance to sandbox escapes
What You'll Bring
5+ years of experience in systems, security, or infrastructure engineering
Robust experience with container or microVM technologies (Docker, Firecracker, gVisor, or similar)
Solid operating-systems and security fundamentals, including syscall-level filtering
Proficiency in Rust, Go, or C++
A security-first mindset when designing multi-tenant systems
Education B.Tech in Computer Science, ideally with coursework in operating systems or security.
Nice to Have
A security engineering background (malware sandboxing, endpoint security) — this transfers directly to this role's isolation challenges
Experience running multi-tenant infrastructure at scale