Sandstorm.io (https://sandstorm.io) is working on turning server infrastructure and security upside-down without the need to rewrite applications. The goal is for distributed infrastructure and security to be as easy as possible for end users to manage, and as hard as possible for applications to screw up. The model we're building is capability-based; previous capability-based research systems have usually required rewriting apps to fit the model, but ours does not. This leads to a lot of interesting computer science, systems engineering, security, and UX problems, both in designing a new model that is practical and just-in-time reverse-engineering of application intent in order to seamlessly fit it into the new model.
We only just raised a seed round[0], which only gives us money to hire a couple of people, and we already have more really awesome candidates than we have budget to hire. So basically we're all set on hiring until Series A (2016?). You can feel free to e-mail jobs@sandstorm.io if you think you're an exceptional case, but probably the answer will be: "Sorry, we don't have budget or bandwidth to interview more people right now. :("
Possibly-interesting technical posts:
https://blog.sandstorm.io/news/2014-08-19-why-not-run-docker...
https://blog.sandstorm.io/news/2014-08-13-sandbox-security.h...
https://blog.sandstorm.io/news/2014-07-24-tinytinyrss-plus-s...
https://blog.sandstorm.io/news/2014-05-12-easy-port.html
https://blog.sandstorm.io/news/2014-12-15-capnproto-0.5.html
https://blog.sandstorm.io/news/2014-07-21-open-source-web-ap...
https://blog.sandstorm.io/news/2015-01-14-compute-units.html
Sandstorm is not currently actively hiring. But it is an open source project if you're interested in contributing. See:
https://github.com/sandstorm-io/sandstorm/wiki/Get-Involved