Windows Endpoint Security Developer
Core
Build a Windows service and kernel-mode drivers for an AI-focused endpoint protection platform to detect and respond to threats.
Role type
Senior IC Windows Endpoint Security Developer (C/C++ & Driver Development)
Builds
Windows endpoint protection agents with kernel-mode and user-mode modules
Domain
Cybersecurity / Endpoint Security / Windows Internals
Deliverable
production ML models
Required skills
Windows driver development (WDM, KMDF, UMDF), C/C++, Windows internals, kernel-mode communication (IOCTL, ALPC), Windows Filtering Platform (WFP), minifilters, ETW, threat modeling, secure coding, advanced debugging (WinDbg, crash dumps)
Preferred skills
Cross-platform endpoint security (macOS/Linux), telemetry pipelines, AI/ML-driven security products
Technologies
C, C++, WDM, KMDF, UMDF, WFP, WinDbg, Sysinternals
Responsibilities
Design and implement kernel-mode and user-mode modules; Develop Windows drivers to monitor file system, process, memory, and network activity; Build features for efficient data collection focused on AI behavioral monitoring; Implement secure hooks and filters using WFP, minifilters, and ETW; Perform advanced debugging and troubleshooting across kernel and user mode; Optimize agent performance to minimize system impact; Participate in threat modeling and secure coding reviews
Seniority
Senior, hands-on IC
