Description

You will secure infrastructure running untrusted code at massive scale, balancing strong isolation guarantees with high-performance requirements in a distributed environment.

This role is on-site.

Responsibilities

• Design and implement defense-in-depth security for sandboxed and microVM-based systems.
• Build real-time threat detection across large numbers of concurrent environments.
• Apply Linux security primitives to enforce isolation and runtime protection.
• Secure high-scale infrastructure executing untrusted workloads.
• Ensure compliance with enterprise security standards while maintaining low-latency performance.

Required Skills

• 5+ years securing production infrastructure, specifically distributed systems at scale.
• Deep, hands-on experience with Linux security primitives (seccomp, eBPF, namespaces).
• Proficiency in Go, Rust, or TypeScript.
• Experience with container security and microVM hardening.
• Familiarity with compliance frameworks including SOC 2, ISO 27001, and GDPR.
• Experience securing distributed systems at massive scale.
• Experience working in a fast-paced startup environment (ideally seed-Series B).
• Willingness to work 4 days on-site in San Francisco.

Key Skills

Education

Any Graduate