Software Engineer, Sandboxing

Thinking Machines Lab
San Francisco
Workplace: HybridFull timeUSD 300,000 - 450,000 annuallyFunction: Software EngineeringEducation: bachelorsSkills: ["Cross-functional collaboration","End-to-end ownership","Project execution"]

Build and operate the sandboxing platform that safely runs untrusted, model-generated code and tool calls at scale. You’ll design secure isolation boundaries (containers, microVMs, gVisor-style runtimes), create scheduling and lifecycle systems for efficient sandbox provisioning, and instrument sandboxes for observability and abuse detection. Partner with researchers and product teams to expose primitives that are easy to use and hard to misuse, owning reliability and performance end-to-end.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Thinking Machines Lab
Thinking Machines Lab
1 day ago

Software Engineer, Sandboxing

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 7 hours agoStatus: Live

Job Summary

Build and operate the sandboxing platform that safely runs untrusted, model-generated code and tool calls at scale. You’ll design secure isolation boundaries (containers, microVMs, gVisor-style runtimes), create scheduling and lifecycle systems for efficient sandbox provisioning, and instrument sandboxes for observability and abuse detection. Partner with researchers and product teams to expose primitives that are easy to use and hard to misuse, owning reliability and performance end-to-end.
Location: San Francisco
Workplace: Hybrid
Employment Type: Full time
Job Function: Software Engineering

Key Responsibilities

  • •Design, build, and operate sandboxed execution environments for untrusted code and tool calls at scale.
  • •Improve isolation boundaries using containers, microVMs, or gVisor-style kernels while balancing security and performance.
  • •Build scheduling, resource-management, and lifecycle systems to provision, reuse, and tear down sandboxes under heavy concurrency.
  • •Partner with researchers and Tinker's product team to expose sandboxing primitives that are simple and hard to misuse.
  • •Instrument sandboxes for observability and abuse detection, and respond to novel escape or exploitation attempts.

Pay and Benefits

Salary: USD 300,000 - 450,000 annually
Perks:Health InsuranceDentalVisionPaid LeaveParental LeaveRelocation

Key Requirements

  • •Bachelor's degree or equivalent experience in computer science, engineering, or similar.
  • •Proficiency in at least one backend language (Python or Rust).
  • •Experience building or operating isolation/virtualization technology (containers, microVMs, or sandboxed runtimes like gVisor/Kata Containers).
  • •Solid grounding in Linux internals for isolation: namespaces, cgroups, seccomp, capabilities, and networking.
  • •Comfort operating across the stack and owning projects end-to-end.
Education:Bachelor's
Skills:Cross-functional collaborationEnd-to-end ownershipProject execution
Tech Stack:PythonRustContainersMicroVMsFirecrackerCloud HypervisorGVisorKata ContainersLinuxNamespacesCgroupsSeccompCapabilitiesNetworkingKubernetes

Eligibility

Work Authorization:Sponsorship available.

Company Brief

Thinking Machines Lab
Develops enterprise AI solutions, custom large language models, and ML platforms to help organizations deploy intelligent applications. Services include data engineering, model development, and AI consulting for scale and production readiness.
Industry: AI & Machine Learning
Company Size: Medium (51 to 250 employees)
Growth: Growth Stage Startup
Headquarters: Mumbai, India
Website