Senior Staff Engineer (Cortex XDR)
Core
Technical authority for the Cortex Cloud Windows endpoint agent, owning kernel- and user-mode components for detection, prevention, and visibility across millions of Windows endpoints.
Role type
Senior Staff Engineer (Low-Level Systems)
Builds
Cortex Cloud Windows endpoint agent (kernel drivers, user-mode services, injection/hooking engine)
Domain
Cybersecurity / Endpoint Detection and Response (EDR) / Windows Systems Programming
Deliverable
production ML models | product features
Required skills
C (kernel/user-mode), C++17/20, x86/x64 assembly, Windows Internals (NT kernel, IRQL, drivers), Advanced Debugging (WinDbg, crash dumps), Performance Engineering (ETW, WPR/WPA), Systemic Problem Solving, Defensive Engineering
Preferred skills
Endpoint Security (EDR/AV), Rust in Systems Code, Driver Development (WDK, WFP), Reverse Engineering (IDA Pro, Ghidra), Fleet-Scale Telemetry, Adjacent Platforms (macOS/Linux), AI-assisted development
Technologies
GitLab, GoogleTest, WinDbg, ETW, WPR/WPA, Process Monitor, YARA, Hyperscan, OpenSSL, Protobuf, gRPC, WDK, IDA Pro, Ghidra
Responsibilities
Serve as local technical authority for critical field issues and lead high-severity escalations; Design, implement, and maintain user-mode components and Windows kernel drivers; Diagnose and remediate kernel/user-mode failures using minidumps and system traces; Partner with release pipelines to gate risky changes and ensure stability across diverse configurations.
Seniority
Senior Staff, hands-on IC