Senior Security Software Engineer, Sandbox Platforms

Location: San Mateo, California, United States; hybrid office attendance required Tuesday, Wednesday, and Thursday

Salary: $269,170–$326,060 USD annual base pay

Company

Roblox builds tools and platforms for developers and creators to produce immersive 3D digital experiences.

What you will do

• Design, implement, and harden process sandboxes across Linux, macOS, and Windows.
• Use platform isolation primitives including seccomp-bpf, namespaces, cgroups, Landlock, Seatbelt, AppContainer, job objects, restricted tokens, and integrity levels.
• Define and minimize communication paths involving syscalls, IPC, shared memory, file descriptors, sockets, and brokers.
• Analyze and reduce kernel, broker, device-access, and side-channel attack surfaces.
• Make and document engineering tradeoffs between isolation strength, performance, compatibility, and maintainability.
• Write threat models, review security designs, and respond to sandbox escapes and hardening findings.

Requirements

• Deep hands-on knowledge of the security model and sandboxing primitives of at least one of Linux, macOS, or Windows.
• Strong understanding of attack-surface analysis and sandbox escape risks.
• Experience designing secure boundaries between sandboxes and hosts, including brokers, IPC, syscall filtering, and privilege separation.
• Systems programming experience in C, C++, or Rust at the syscall and kernel-interface level.
• Security mindset focused on least privilege and distrust of inputs crossing isolation boundaries.
• For this US-based role, certain US work authorization categories may not be supported, and future H-1B sponsorship is not available at this time.

Nice to have

• Experience across more than one of Linux, macOS, and Windows.
• Kernel, hypervisor, or low-level operating-system internals experience.
• Fuzzing, exploit development, or red-team experience against isolation boundaries.

Culture & Benefits

• Full-time employment with equity compensation eligibility.
• Benefits are available to full-time employees.
• Office-based work includes optional presence on Monday and Friday.
• Equal employment opportunities and reasonable recruiting accommodations are provided.