You build the isolation around models, plugins and remote jobs, so a person can add a useful tool without giving that tool access to their life. The distinction that matters here is between restricting a process and defending against a host that is already compromised, and this role is about the second.
Open for applications. Starts at: Pilot expansion.
We are taking applications for this role now and building the pipeline for it. The stage above is when the work itself is expected to begin, which is something you deserve to know before you apply rather than after. It is context, not a gate.
Where
In the office together five days a week, in one of our garages, and remote-friendly around your family, arranged one person at a time. We hire across the United States 🇺🇸, India 🇮🇳 and the UAE 🇦🇪.
The work
Evaluate processes, containers, virtual machines and capability-based restrictions against the actual threat model. Implement filesystem and network boundaries, resource quotas and safe lifecycle management. Work with security researchers to test escapes and confused-deputy behavior.
The milestone
In your first 90 days, deliver an isolated tool runner with explicit permissions, reproducible attack tests and measured startup and memory costs.
Required
Nice to have
Evidence
Bring experience with kernel isolation, hypervisors or hardened execution environments. Understand the difference between restricting a process and protecting against a compromised host.
Evidence, not credentials. We are describing work you can point at, in whatever form it exists.
The exercise
Design a document-conversion sandbox that handles malicious files while preventing credential access and unintended network use.
The package
Indicative pay ranges by market and level are on the compensation page. Plan numbers are confirmed in your offer letter.
Apply
One short form. A person reads every application and you hear back either way. You will get your own link to check where things stand, and you can withdraw or delete your application from it at any time, without an account.
