Staff Software Engineer, Secure Execution

Responsibilities

• Set technical direction and roadmap for secure agent execution across Security, Infrastructure, and Product Engineering.
• Design, build, and operate platforms that enable security agents to discover and validate vulnerabilities within authorized targets and execution boundaries.
• Build controls for agent tool use, code execution, network and filesystem access, resource consumption, workload lifecycle, identity, secrets, and sensitive-data access.
• Partner with product sandbox and internal agent-platform teams on architecture, protections, and shared security capabilities.
• Enable secure internal use of open-source models, including protections around model serving, agent execution, and sensitive-data handling.
• Develop adversarial tests, evaluations, telemetry, interruption mechanisms, and safe termination capabilities for agent activity.
• Lead delivery and adoption across teams, mentor engineers, and remain hands-on through implementation and production operation.

Requirements

• 10+ years developing and running production software, including technical leadership across multiple engineering teams.
• Strong software engineering skills in Go, Rust, Python, or C++, with practical experience in Linux systems, networking, and containerized infrastructure.
• Deep expertise in execution security such as sandboxing, operating-system isolation, container or virtual-machine security, or platforms that execute untrusted code.
• Experience building shared platforms, services, or libraries and supporting adoption through interfaces, documentation, and safe migrations.
• Experience with cloud infrastructure and distributed systems, including observability, failure handling, capacity management, and dependable production operation.
• Fluency with AI-assisted engineering and agentic workflows, including understanding risks from tool use, code execution, and sensitive-data access.
• Strong communication and technical judgment, with experience aligning teams on ambiguous problems and carrying decisions through delivery.
• Preferred experience with microVMs, hypervisors, sandbox runtimes, Linux isolation mechanisms, agent runtimes, tool-execution frameworks, automated security-testing platforms, vulnerability research, penetration testing, adversarial evaluation, self-hosted inference, or securing open-source models.