Senior Kernel Software Developer
at ThreatLocker · 501-1000 employees
Just raised · Series F · $190M
- Seniority
- Senior
- Work model
- Onsite
- Location
- Orlando, FL
- Posted
- 5d ago
c++
at ThreatLocker · 501-1000 employees
ThreatLocker is a cybersecurity company offering a Zero Trust Platform that prevents breaches by allowing only explicitly trusted software and activity across endpoints, networks, and cloud systems.
<p><strong>COMPANY OVERVIEW</strong></p> <p><span class="ui-provider a b c d e f g h i j k l m n o p q r s t u v w x y z ab ac ae af ag ah ai aj ak">ThreatLocker® is a leader in endpoint protection technologies, providing enterprise-level cybersecurity tools to improve the security of servers and endpoints. The ThreatLocker® platform with Application Allowlisting, Ringfencing™, Storage Control, Elevation Control, Endpoint Network Control, Configuration Management, and Operational Alert solutions are leading the cybersecurity market toward a more secure approach of blocking the exploits of application vulnerabilities.</span></p> <p><strong>POSITION OVERVIEW</strong></p> <p>We are seeking a Windows <span class="markybbsaqtiu" data-markjs="true" data-ogac="" data-ogab="" data-ogsc="" data-ogsb="">Kernel</span> Driver Engineer with extensive experience in filter driver development and Windows system internals to join our cybersecurity product team. In this role, you will build and maintain critical <span class="markybbsaqtiu" data-markjs="true" data-ogac="" data-ogab="" data-ogsc="" data-ogsb="">kernel</span>-mode components that power next-generation threat detection, prevention, and response capabilities on Windows systems. <span style="color: rgb(26, 113, 200);"><strong>The role will be based in Orlando, FL and is an in-office position.</strong></span></p> <p><strong>JOB SCOPE</strong></p> <p><span style="font-weight: 400;">The Kernel Developer will be responsible for, but not limited to:</span></p> <ul> <li>Design and develop <span class="markybbsaqtiu" data-markjs="true" data-ogac="" data-ogab="" data-ogsc="" data-ogsb="">kernel</span>-mode filter drivers (file system minifilter, registry filter, network filter, etc.) to support security monitoring and enforcement.</li> <li><span data-olk-copy-source="MessageBody">Investigate and reverse-engineer Windows internals to implement low-level security features and bypass-resistant protections.</span></li> <li><span data-olk-copy-source="MessageBody">Collaborate with the threat research, detection, and user-mode engineering teams to develop scalable and stealthy security solutions.</span></li> <li><span data-olk-copy-source="MessageBody">Perform in-depth <span class="markybbsaqtiu" data-markjs="true" data-ogac="" data-ogab="" data-ogsc="" data-ogsb="">kernel</span> debugging, crash dump analysis, and performance tuning using WinDbg, ETW, and related tools.</span></li> <li><span data-olk-copy-source="MessageBody">Develop robust, secure, and maintainable driver code that meets Microsoft's signing and certification standards.</span></li> <li><span data-olk-copy-source="MessageBody">Monitor Windows platform changes to ensure compatibility and stability across OS versions.</span></li> </ul> <p><strong>REQUIRED QUALIFICATIONS</strong></p> <ul> <li>5+ years of hands-on experience writing Windows <span class="markybbsaqtiu" data-markjs="true" data-ogac="" data-ogab="" data-ogsc="" data-ogsb="">kernel</span>-mode drivers, particularly filter drivers.</li> <li>Expert knowledge of Windows system internals (memory management, I/O subsystem, object manager, etc.).</li> <li>Proficiency in C/C++, Windows Driver Kit (WDK), and <span class="markybbsaqtiu" data-markjs="true" data-ogac="" data-ogab="" data-ogsc="" data-ogsb="">kernel</span> debugging tools.</li> <li>Experience in the cybersecurity domain, especially endpoint protection, EDR, anti-malware, or <span class="markybbsaqtiu" data-markjs="true" data-ogac="" data-ogab="" data-ogsc="" data-ogsb="">kernel</span>-level monitoring.</li> <li>Solid understanding of code injection techniques, hooking, <span class="markybbsaqtiu" data-markjs="true" data-ogac="" data-ogab="" data-ogsc="" data-ogsb="">kernel</span>-mode exploits, and mitigation strategies.</li> <li><span data-olk-copy-source="MessageBody">Strong problem-solving skills and a security-first engineering mindset.</span></li> </ul> <p><strong>PREFERRED QUALIFICATIONS</strong></p> <ul> <li>Experience with malware analysis, reverse engineering, or rootkit detection.</li> <li>Familiarity with Windows <span class="markybbsaqtiu" data-markjs="true" data-ogac="" data-ogab="" data-ogsc="" data-ogsb="">kernel</span> threat models and secure coding practices.</li> <li>Exposure to Microsoft <span class="markybbsaqtiu" data-markjs="true" data-ogac="" data-ogab="" data-ogsc="" data-ogsb="">kernel</span>-mode signing, WHQL, and driver submission processes</li> <li><span data-olk-copy-source="MessageBody">Contributions to the infosec community (research, publications, open-source projects, talks)</span></li> </ul> <p><strong>WORKING CONDITIONS</strong></p> <p><span style="font-weight: 400;">The duties described below are representative of those encountered while performing the essential functions of this position. If necessary, reasonable accommodation may be requested and will be evaluated for its relationship to the essential functions that must be performed.</span></p> <ul> <li style="font-weight: 400;"><span style="font-weight: 400;">Job will generally be performed in an office environment but may require travel to visit company offices and/or property locations.</span></li> <li style="font-weight: 400;"><span style="font-weight: 400;">While performing duties of this job, would occasionally require to stand, walk, sit, reach with hands and arms, climb or balance, stoop or kneel, talk and hear, and use fingers and hands to feel objects and tools.</span></li> <li style="font-weight: 400;"><span style="font-weight: 400;">Must occasionally lift and/or move up to 25 pounds.</span></li> <li style="font-weight: 400;"><span style="font-weight: 400;">Specific vision abilities required include close vision, distance vision, depth perceptions, and the ability to adjust focus.</span></li> </ul> <p><span style="color: rgb(26,