Expert Windows Driver Engineer

DataArt Poland sp. z o.o.; Warszawa; Hybrid; PLN 240,000 - 320,000; Full time

Benefits offered by this job

26 dni urlopu rocznie

Ubezpieczenie zdrowotne i na życie

Kursy językowe angielskiego

Job summary

DataArt Poland sp. z o.o. poszukuje doświadczonego inżyniera sterowników Windows do rozwoju platformy monitorującej end-pointy. Praca obejmuje tworzenie kernel-mode drivers i usług, z naciskiem na wydajność, stabilność i bezpieczenstwo systemów Windows.

Wymagane jest 7+ lat doświadczenia w C++ i zaawansowana znajomość Windows internals, WFP, KMDF oraz ETW. Dostępna opcja pracy hybrydowej, wsparcie szkoleniowe i benefity.

Qualifications

• Prawa do samodzielnego programowania sterowników Windows (KMDF) i usług użytkowych
• 7+ lat praktycznego doświadczenia w C++ (C++11+).
• Głęboka znajomość Windows internals, architektury jądra i obsługi systemów wywołań.

Responsibilities

• Budowa sterowników jądra Windows i usług użytkowych do zbierania telemetrii na endpointach.
• Projektowanie i rozwijanie niskopoziomowych komponentów dla sensora Windows endpoint.
• Implementacja monitoringu procesów wątki, ścieżek rejestru, przechwytywania plików i widoczności sieci.
• Debugowanie złożonych problemów w kernel-mode i user-mode na różnych wersjach Windows.
• Współpraca z zespołami badawczymi i produktowymi nad implementacją funkcji z wymaganą ochroną.

Skills

C++

Windows Server

Rust

PowerShell

Python

Education

Bachelor's degree w informatyce lub pokrewnym kierunku

Tools

Visual Studio

WDK

KMDF

WFP

ETW

IDA

Ghidra

Job description

Expert Windows Driver Engineer

Miejsce pracy: Warszawa

Technologies we use

Expected

• C++
• Windows Server

Optional

• Rust
• PowerShell
• Python
• Windows Server

Operating system

• Windows

About the project

The project focuses on building a configurable multi agent platform that supports autonomous workflows, agent collaboration, tool integration, and governed execution.

The platform leverages modern agent orchestration frameworks, cloud native services, and observability solutions to deliver reliable and scalable AI capabilities across enterprise environments.

This is how we organize our work

This is how we work

• at the client's site
• you have influence on the technological solutions applied
• you focus on product development

Team members

• embedded developer

Your responsibilities

• Build Windows kernel-mode drivers and user-mode services that collect, filter, and analyze endpoint telemetry.
• Design and develop low-level components for the Windows endpoint sensor, focusing on stability, performance, and stealth.
• Implement robust techniques for process/thread monitoring, registry tracking, file system interception, and network event visibility.
• Debug complex kernel-mode and user-mode issues across multiple Windows versions.
• Collaborate with researchers and product teams to translate threat intelligence into product features.
• Conduct code reviews, mentor engineers, and contribute to architectural decisions.
• Stay current with Windows internals, security trends, and system programming best practices.

Our requirements

• Recent, hands-on experience developing Windows kernel drivers (for at least the last 2 years) using KMDF, Windows Filtering Platform (WFP), minifilters, and ETW.
• 7+ years of hands-on experience in C++ development (C++11 or later).
• In-depth understanding of Windows internals, including kernel architecture, system calls, memory management, and drivers.
• Strong debugging and reverse engineering skills using tools such as WinDbg, Process Monitor, Process Explorer, IDA, or Ghidra.
• Familiarity with Windows security mechanisms, including integrity levels, UAC, AppLocker, and Secure Boot.
• Experience using Visual Studio, Windows Driver Kit (WDK), and related development environments.
• Bachelor's degree in Computer Science, Software Engineering, or equivalent practical experience.

Optional

• Experience developing with Rust.
• Experience building or contributing to endpoint security products (EDR, AV, EPP, etc.).
• Familiarity with Windows telemetry, Event Logs, Sysmon, and ETW tracing.
• Experience with malware analysis, Windows exploitation techniques, or SOC/DFIR workflows.
• Experience in the cybersecurity domain is a plus.
• Scripting skills in PowerShell or Python for automation and testing.
• Understanding of kernel-mode security evasion techniques and defensive mechanisms.
• Experience with code signing, driver deployment, and secure update mechanisms.

What we offer

• Vacation days: Up to 26 business days per year.
• 10 illness/special days off per year (fully paid, no medical papers needed) for all contract types.
• Health and life insurance (Luxmed).
• MyBenefit platform with Multisport option.
• Internal psychological support service.
• English language classes from the first working day.
• Access to external learning platforms: O’Reilly, LinkedIn Learning, Udemy, and a wide catalog of diverse internal training.
• Flexible workplace: work from the office, from home, or choose a hybrid option.
• Tech Skills Mentoring Program.
• Opportunities to develop as a public speaker, mentor, or technical interviewer.
• Fully paid idle (bench) when not involved in a project.
• Certification reimbursement (AWS, GCP, Microsoft, etc.).

This is how we work on a project

• code review
• documentation

Development opportunities we offer

• substantive support from technological leaders
• technical knowledge exchange within the company

Benefits

• sharing the costs of sports activities
• private medical care
• sharing the costs of professional training & courses
• life insurance
• remote work opportunities
• flexible working time
• integration events

DataArt Poland sp. z o.o.

Our client is a global provider of domain registration, web hosting, and SSL certificate services. The company supports thousands of resellers and hundreds of thousands of businesses worldwide, offering reliable solutions for managing digital infrastructure.