Windows Kernel Software Developer
Job Description
ThreatLocker is hiring a Windows Kernel Software Developer to design and maintain kernel-mode components for its Zero Trust security platform in Orlando, FL.
Responsibilities
- Design and implement Windows kernel-mode filter drivers, including file system minifilters, registry filters, and network filters
- Build security monitoring and enforcement for file, process, registry, and network activity
- Investigate Windows internals to create low-level, bypass-resistant security features
- Use kernel debugging and analysis workflows, including crash dump analysis and performance tuning
- Develop secure, stable, and maintainable driver code
- Maintain compatibility across supported Windows versions and platform changes
- Collaborate with user-mode, QA, DevOps, and security engineering teams
Requirements
- 5+ years of hands-on experience developing Windows kernel-mode drivers
- Experience developing Windows filter drivers
- Strong knowledge of Windows system internals, including memory management, I/O, processes, and the object manager
- Strong C/C++ development skills
- Experience with the Windows Driver Kit (WDK)
- Strong experience with kernel debugging and crash analysis
- Experience with kernel synchronization, concurrency, and performance-sensitive code
- Strong problem-solving skills with a security-first engineering mindset
Technologies
- WinDbg
- ETW
- WPP
- Windows Driver Kit (WDK)
- C/C++
Preferred Qualifications
- Experience with Windows file system minifilters and Filter Manager
- Experience with Windows Filtering Platform (WFP)
- Experience with registry filtering and process monitoring
- Experience with endpoint security, EDR, anti-malware, application control, or Zero Trust products
- Experience with WinDbg, Driver Verifier, ETW, and WPP tracing
- Experience with reverse engineering or malware analysis
- Familiarity with Windows kernel threat models and secure coding practices
- Exposure to Microsoft driver signing, WHQL, HLK, and driver submission processes
- Contributions to security research, open-source projects, publications, or technical talks
Working Conditions
- In-office role in Orlando, Florida
- Generally performed in an office environment; occasional travel may be required
- Must occasionally lift and/or move up to 25 pounds
- Background check and drug/substance screening required after a conditional offer; employment proceeds only with clear results
- Randomized drug and substance testing approximately every 60 days, using the same screening standards