Senior Sandbox Security Engineer: OS Isolation & Hardening

Roblox; Canada (KY); On-site; USD 269,000 - 326,000; Full time

Benefits offered by this job

Equity compensation

Benefits described on page

Job summary

Roblox is seeking a deep systems security engineer to design, build, and harden sandboxing across Linux, macOS, and Windows. You’ll manage isolation boundaries, control IPC and syscalls, and reduce attack surfaces while balancing performance and compatibility.

Responsibilities include threat modeling, design reviews, and rapid response to sandbox escapes. Strong C/C++/Rust systems programming and OS security expertise are required.

Qualifications

• Deep hands-on knowledge of OS security models on at least one platform (Linux, macOS, Windows).
• Strong ability to analyze attack surfaces and shrink exposure.
• Fluency at the boundary between sandbox and host, including interfaces and privilege separation.
• Experience with systems programming in C, C++, or Rust at kernel or syscall level.
• Ability to document tradeoffs between isolation strength, performance, and compatibility.

Responsibilities

• Design and implement sandboxes using platform primitives across Linux, macOS, and Windows.
• Define and lock down all communication paths in and out of the sandbox (syscalls, IPC, shared memory, files, sockets).
• Enumerate and reduce attack surface, including kernel syscall surface and broker interfaces.
• Make deliberate engineering tradeoffs between isolation strength, performance, compatibility, and maintainability.
• Write threat models, review designs, and respond to sandbox escapes and hardening findings.

Skills

OS security model knowledge

Sandboxing primitives

Systems programming

Threat modeling

Privilege separation

IPC / brokers understanding

Tools

nsjail

seccomp-bpf

Landlock

Seatbelt

AppContainer

Job description

Roblox is seeking a deep systems security engineer to design, build, and harden sandboxing across Linux, macOS, and Windows. You’ll manage isolation boundaries, control IPC and syscalls, and reduce attack surfaces while balancing performance and compatibility.

Responsibilities include threat modeling, design reviews, and rapid response to sandbox escapes. Strong C/C++/Rust systems programming and OS security expertise are required.