Windows Driver and Kernel Security Engineer

Zealot Labs, Inc.; Greater London; Hybrid; GBP 100,000 - 195,000; Full time

Job summary

Zealot Labs, Inc. is actively seeking researchers to uncover vulnerabilities in Windows kernel-mode and driver software. You will analyze kernel drivers, identify exploit surfaces, and develop techniques for privilege escalation and sandbox escape.

You will build automated tooling for driver analysis, fuzzing, and vulnerability triage, leveraging deep knowledge of Windows internals and reverse engineering. This role is on-site in London and involves advanced security research.

Qualifications

• Experience researching Windows kernel vulnerabilities and driver security.
• Strong reverse engineering and exploit development skills.
• Proficiency with debugging and analysis tools (WinDbg, IDA/Ghidra).

Responsibilities

• Discover and exploit vulnerabilities in Windows kernel-mode and user-mode drivers.
• Research attack surfaces across Windows display and kernel drivers.
• Develop exploit primitives for privilege escalation and kernel code execution.
• Build automated tooling for driver analysis, fuzzing, and vulnerability triage.
• Deep experience with Windows kernel internals: I/O manager, object manager, memory manager.
• Proven track record of driver vulnerability research (CVEs, ZDI submissions, or security research).
• Strong x86/x64 reverse engineering and exploit development skills.
• Proficiency with WinDbg, IDA/Ghidra, and driver analysis frameworks.

Skills

Windows kernel security

Reverse engineering

Exploit development

Fuzzing

Driver analysis

Tools

WinDbg

IDA/Ghidra

Job description

Zealot Labs, Inc. is actively seeking researchers to uncover vulnerabilities in Windows kernel-mode and driver software. You will analyze kernel drivers, identify exploit surfaces, and develop techniques for privilege escalation and sandbox escape.

You will build automated tooling for driver analysis, fuzzing, and vulnerability triage, leveraging deep knowledge of Windows internals and reverse engineering. This role is on-site in London and involves advanced security research.