POSITION OVERVIEW
We are seeking a Windows Kernel Software Developer with hands-on experience in filter driver development and Windows system internals to join our cybersecurity product team.
In this role, you will build and maintain critical kernel-mode components that support ThreatLocker's Zero Trust security platform, including file, process, registry, and network monitoring and enforcement.
DEVELOPMENT - Full-Time
This role will be based in Orlando, FL and is an in-office position.
JOB SCOPE
The Kernel Developer will be responsible for, but not limited to:
- Design and develop Windows kernel-mode filter drivers, including file system minifilters, registry filters, and network filters.
- Implement security monitoring and enforcement for file, process, registry, and network activity.
- Investigate Windows internals to develop low-level security features and bypass-resistant protections.
- Perform kernel debugging, crash dump analysis, and performance tuning using WinDbg, ETW, WPP, and related tools.
- Develop secure, stable, and maintainable driver code.
- Maintain compatibility across supported Windows versions and platform changes.
- Collaborate with user-mode, QA, DevOps, and security engineering teams.
REQUIRED QUALIFICATIONS
- 5+ years of hands-on Windows kernel-mode driver development experience.
- Experience developing Windows filter drivers.
- Strong knowledge of Windows system internals, including memory management, I/O, processes, and the object manager.
- Strong C/C++ development skills.
- Experience with the Windows Driver Kit (WDK).
- Strong experience with kernel debugging and crash analysis.
- Experience with Windows kernel synchronization, concurrency, and performance-sensitive code.
- Strong problem-solving skills and a security-first engineering mindset.
PREFERRED QUALIFICATIONS
- Experience with Windows file system minifilters and Filter Manager.
- Experience with Windows Filtering Platform (WFP).
- Experience with registry filtering and process monitoring.
- Experience with endpoint security, EDR, anti-malware, application control, or Zero Trust products.
- Experience with WinDbg, Driver Verifier, ETW, and WPP tracing.
- Experience with reverse engineering or malware analysis.
- Familiarity with Windows kernel threat models and secure coding practices.
- Exposure to Microsoft driver signing, WHQL, HLK, and driver submission processes.
- Contributions to security research, open-source projects, publications, or technical talks.
WORKING CONDITIONS
- This is an in-office position based in Orlando, Florida.
- Job will generally be performed in an office environment but may require occasional travel.
- Must occasionally lift and/or move up to 25 pounds.
