Sandboxing Systems Engineer: Linux, Kernel & Cloud

EngineersOfAI; San Francisco (CA); Hybrid; USD 180,000 - 240,000; Full time

Job summary

Anthropic seeks a Sandboxing Engineer to design, build, and operate the sandboxing infrastructure that runs untrusted, model-generated code and agent workloads at scale.

You will work at the boundary of the Linux kernel, virtualization, and container ecosystems, collaborating with research, product, and security teams to ensure safe, fast, and scalable execution across Claude products and customers.

Qualifications

• Experience in Linux systems programming or kernel development.
• Proficiency in at least one systems language (Rust, C, C++, Go).
• Familiarity with virtualization/container isolation tech (KVM, QEMU, Firecracker, gVisor, runc).
• Understanding Linux resource management (namespaces, cgroups, scheduling, memory).
• Experience profiling and debugging system-level performance issues.
• Ability to learn unfamiliar codebases and ship practical, measurable outputs.
• Strong communication and commitment to safe, reliable systems.

Responsibilities

• Design, build, and operate sandboxing infrastructure for untrusted, model-generated code and agent workloads at scale.
• Improve sandbox startup time, density, throughput, including snapshot/restore, checkpointing, and warm pools.
• Strengthen isolation across compute, filesystem, and network, with egress controls and per-session credentials.
• Investigate and fix performance, reliability, and security issues at kernel, hypervisor, and container runtime levels.
• Build monitoring, tracing, and debugging tools to understand time/resource use inside a sandbox.
• Collaborate with researchers to support RL environments and evaluations requiring fast, reproducible isolated execution.
• Collaborate with product/platform engineers to expose sandboxes as dependable capabilities for Claude products and customers.
• Partner with security teams to threat-model the platform and test/harden/respond to escape scenarios.
• Work with cloud providers on hardware/platform features our workloads depend on.
• Share knowledge on systems programming and Linux internals, helping set team standards.

Skills

Systems language

Linux systems programming

Performance profiling

Communication

Adaptability

Ship practical solutions

Tools

KVM

QEMU

Firecracker

gVisor

runc

Job description

Anthropic seeks a Sandboxing Engineer to design, build, and operate the sandboxing infrastructure that runs untrusted, model-generated code and agent workloads at scale.

You will work at the boundary of the Linux kernel, virtualization, and container ecosystems, collaborating with research, product, and security teams to ensure safe, fast, and scalable execution across Claude products and customers.