Software Engineer, Sandboxing

Thinking Machines Lab
San Francisco, New York
Workplace: OnsiteFull timeUSD 300,000 - 350,000 annuallyFunction: Software EngineeringEducation: bachelorsSkills: ["Cross-functional collaboration","End-to-end ownership","Reliability focus","Observability mindset"]

Build and operate the sandboxing infrastructure that safely runs untrusted, model-generated code and tool calls at scale. Design isolation boundaries and improve security using containers, microVMs, and gVisor-style runtimes while balancing latency and throughput. Own the lifecycle systems that schedule, provision, and tear down sandboxes under heavy concurrency, and instrument for observability, abuse detection, and reliability from API to virtualization layer.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Thinking Machines Lab
Thinking Machines Lab
9 hours ago

Software Engineer, Sandboxing

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 4 hours agoStatus: Live

Job Summary

Build and operate the sandboxing infrastructure that safely runs untrusted, model-generated code and tool calls at scale. Design isolation boundaries and improve security using containers, microVMs, and gVisor-style runtimes while balancing latency and throughput. Own the lifecycle systems that schedule, provision, and tear down sandboxes under heavy concurrency, and instrument for observability, abuse detection, and reliability from API to virtualization layer.
Location: San Francisco, New York
Workplace: Onsite
Employment Type: Full time
Job Function: Software Engineering

Key Responsibilities

  • •Design, build, and operate sandboxed execution environments for untrusted code and tool calls at scale.
  • •Improve isolation boundaries using technologies such as containers, microVMs, or gVisor-style kernels.
  • •Build scheduling, resource-management, and lifecycle systems for efficient sandbox provisioning, reuse, and teardown.
  • •Partner with researchers and the Tinker product team to expose safe sandboxing primitives.
  • •Instrument sandboxes for observability and abuse detection, and ensure end-to-end reliability and performance.

Pay and Benefits

Salary: USD 300,000 - 350,000 annually
Perks:Health InsuranceDentalVisionPaid LeaveParental LeaveRelocation

Key Requirements

  • •Bachelor's degree (or equivalent) in computer science, engineering, or a similar field.
  • •Proficiency in at least one backend language (Python or Rust).
  • •Experience building or operating isolation/virtualization technology such as containers, microVMs (e.g., Firecracker, Cloud Hypervisor), or sandboxed runtimes (e.g., gVisor, Kata Containers).
  • •Strong Linux internals knowledge relevant to isolation, including namespaces, cgroups, seccomp, capabilities, and networking.
  • •Comfort operating across the stack and owning projects end-to-end.
Experience:InfrastructureVirtualizationLinuxSecurity toolingKubernetes
Education:Bachelor's
Skills:Cross-functional collaborationEnd-to-end ownershipReliability focusObservability mindset
Tech Stack:PythonRustLinuxContainersMicroVMsFirecrackerCloud HypervisorGVisorKata ContainersNamespacesCgroupsSeccompCapabilitiesNetworkingKubernetes

Eligibility

Work Authorization:Sponsorship available.

Company Brief

Thinking Machines Lab
Develops enterprise AI solutions, custom large language models, and ML platforms to help organizations deploy intelligent applications. Services include data engineering, model development, and AI consulting for scale and production readiness.
Industry: AI & Machine Learning
Company Size: Medium (51 to 250 employees)
Growth: Growth Stage Startup
Headquarters: Mumbai, India
Website