Senior Security Software Engineer, Sandbox Platforms
Roblox · San Mateo, CA, United States
About this role
**Senior Security Software Engineer, Sandbox Platforms** **About the Role** Design, build, and harden process sandboxes across Linux, macOS, and Windows. You'll create isolation layers that contain untrusted and semi-trusted code—the last line of defense when something goes wrong. This is a deep systems role focused on attack surface, threat models, and the boundary between trusted and untrusted. **You Will:** • Design and implement sandboxes using platform primitives (nsjail, seccomp-bpf, namespaces, cgroups, Landlock on Linux; Seatbelt/sandbox_init/SBPL on macOS; AppContainer, job objects, restricted tokens, integrity levels on Windows) • Define and lock down every communication path in/out of the sandbox: syscalls, IPC, shared memory, file descriptors, sockets, brokers • Enumerate and reduce attack surface: kernel syscalls, broker interfaces, device access, side channels • Make deliberate engineering tradeoffs between isolation strength, performance, compatibility, and maintainability • Write threat models, review designs, and respond to sandbox escapes **You Have:** • Deep, hands-on knowledge of OS security on at least one of Linux, macOS, or Windows • Strong grasp of attack surface analysis and sandbox escape techniques • Fluency in sandbox/host boundaries (brokers, IPC, syscall filtering, privilege separation) • Systems programming in C, C++, or Rust; comfort at syscall and kernel-interface level • Sound judgment on security tradeoffs • Security mindset: default to least privilege, distrust every input **Nice to Have:** • Experience across multiple platforms • Kernel, hypervisor, or low-level OS internals work • Fuzzing, exploit development, or red-team experience **Compensation & Details** San Mateo, CA | $269,170–$326,060 USD | Equity + Benefits | Onsite Tue/Wed/Thu
Listing freshness
CronJobs last confirmed this listing 1h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.