Worked on enhancing container security in the google/gvisor repository by extending OCI seccomp hardening from the run path to the exec path. Developed and integrated seccomp filters into ExecArgs, ensuring consistent enforcement of security policies for both container startup and subsequent executable processes. Introduced a centralized seccomp builder with comprehensive tests to block sensitive system calls, improving policy consistency and reducing regression risks. The work involved Go programming, system programming, and test-driven development, with a focus on containerization and Linux security. Addressed code review feedback and expanded test coverage, contributing to a more robust and maintainable security posture.