Senior Security Software Engineer, Sandbox Platforms
Core
Design, build, and harden process sandboxes across Linux, macOS, and Windows to contain untrusted code and serve as the last line of defense against security breaches.
Role type
Senior Security Software Engineer (Sandbox Platforms)
Builds
Isolation layers and sandboxing primitives for Roblox's developer platform
Domain
Cybersecurity / Systems Security / Operating Systems
Deliverable
production ML models | product features | infrastructure
Required skills
OS security models (Linux/macOS/Windows), sandboxing primitives (nsjail, seccomp-bpf, namespaces, cgroups, Landlock, Seatbelt, AppContainer), attack surface analysis, systems programming (C/C++/Rust), syscall/kernel interface knowledge, threat modeling, IPC design
Preferred skills
Multi-platform sandboxing experience, kernel/hypervisor internals, fuzzing, exploit development, red-teaming
Technologies
nsjail, seccomp-bpf, namespaces, cgroups, Landlock, Seatbelt, SBPL, AppContainer, job objects, restricted tokens
Responsibilities
Design and implement sandboxes using platform primitives; define and lock down communication paths (syscalls, IPC, shared memory); enumerate and reduce attack surface; make engineering tradeoffs between isolation strength and performance; write threat models and respond to sandbox escapes
Seniority
Senior, hands-on IC
