Windows Endpoint Security Developer

This is a fully remote position, open to applicants in India.

📋 Description

• Design and develop Windows endpoint services, encompassing both kernel-mode and user-mode modules.

• Create Windows drivers (WDM, KMDF, UMDF) to monitor file system, process, memory, and network activities.

• Construct effective data collection functionalities for AI behavioral monitoring.

• Implement secure hooks and filters utilizing WFP, minifilters, and ETW.

• Collaborate on threat research initiatives and convert them into detection logic through endpoint telemetry.

• Conduct advanced debugging and troubleshooting across both kernel and user modes using WinDbg, crash dump analysis, and Sysinternals tools.

• Ensure adherence to Microsoft driver signing, PatchGuard, Secure Boot, and kernel security protocols.

• Optimize agent performance while ensuring visibility and protection.

• Engage in threat modeling, secure coding assessments, and internal security evaluations.

• Develop a Windows service that gathers system, network, and process data to identify and respond to threats.

⛳️ Requirements

• Proven experience in Windows endpoint security products such as AV, EDR, DLP, firewall, or intrusion prevention (mandatory).

• Profound expertise in C, C++, and Windows driver development.

• Strong grasp of Windows OS fundamentals and internals.

• Familiarity with kernel-mode communication methods (IOCTL, ALPC, shared memory).

• Proficient in WinDbg, crash dump analysis, and Sysinternals tools.

• Knowledge of Windows Filtering Platform (WFP), minifilters, and ETW.

• Understanding of Microsoft driver signing, PatchGuard, and Secure Boot.

• Experience in threat modeling and secure coding methodologies.

• Excellent written and verbal English communication skills with a professional tone.

• Previous remote work experience and proficiency with remote collaboration tools and platforms such as Slack, Zoom, Google Workspace, Asana, or similar.

• Ideally, experience working with US or UK-based organizations.

• Familiarity with cross-platform endpoint security (macOS/Linux) is preferred.

• Experience in building telemetry or behavioral analytics pipelines for threat detection is preferred.

• Exposure to AI/ML-driven security products or monitoring AI agent activities is preferred.

• Ability to work from 9:00 AM to 5:00 PM EST.

• Willingness to complete a video interview within the specified timeline.

🏝️ Benefits

• Competitive, transparent compensation.

• Remote work arrangement.

• Long-term career opportunities.

• Opportunities for growth.

• Video interview process with subsequent steps communicated via email.