Running untrusted code and workloads safely, at scale, with strong isolation and data-security guarantees, is a hard and increasingly significant problem in AI infrastructure. As a Sandbox Engineer, you'll build the isolated execution environments that make that possible.
What You'll Do
- Build and maintain container and microVM-based sandboxing for customer code and SQL execution
- Implement syscall filtering and container security hardening
- Support strong multi-tenant isolation guarantees for concurrent customer workloads
- Partner with our security function on data-egress monitoring and isolation requirements
- Continuously test and harden the platform's resistance to sandbox escapes
What You'll Bring
- 5+ years of experience in systems, security, or infrastructure engineering
- Strong experience with container or microVM technologies (Docker, Firecracker, gVisor, or similar)
- Solid operating-systems and security fundamentals, including syscall-level filtering
- Proficiency in Rust, Go, or C++
- A security-first mindset when designing multi-tenant systems
Education
B.Tech in Computer Science, ideally with coursework in operating systems or security.
Nice to Have
- A security engineering background (malware sandboxing, endpoint security) — this transfers directly to this role's isolation challenges
- Experience running multi-tenant infrastructure at scale