Remote Windows Endpoint Security Engineer (C/C++, Driver)

Hire Hangar Global; United States; Remote; USD 120,000 - 160,000; Full time

Benefits offered by this job

Remote-friendly

Competitive salary

US-based team

Job summary

Hire Hangar Global is seeking a Windows Endpoint Security Developer to design and implement Windows endpoint services, including kernel-mode and user-mode modules, with a focus on AI-driven threat detection. This full-time remote role requires deep Windows internals knowledge and hands-on development experience.

You will build Windows drivers (WDM, KMDF, UMDF), implement secure hooks with WFP and ETW, and optimize performance while ensuring compliance with driver signing and Secure Boot.

Qualifications

• Experience in Windows endpoint security products (AV/EDR/DLP, etc.).
• Deep expertise in C, C++, and Windows driver development.
• Strong understanding of Windows OS fundamentals and internals.
• Experience with kernel-mode communication (IOCTL, ALPC, shared memory).
• Proficiency with WinDbg, crash dumps, Sysinternals.
• Knowledge of WFP, minifilters, ETW.
• Understanding of Microsoft driver signing, PatchGuard, Secure Boot.
• Remote work experience with US/UK-based teams.
• Excellent written and spoken English.

Responsibilities

• Design and implement Windows endpoint services, including kernel-mode and user-mode modules.
• Develop Windows drivers (WDM, KMDF, UMDF) to monitor file system, process, memory, and network activity.
• Build features that drive efficient data collection focused on AI behavioral monitoring.
• Implement secure hooks and filters using Windows Filtering Platform (WFP), minifilters, and ETW.
• Collaborate with the team on threat research strategies and translate them into detection logic using endpoint telemetry.
• Perform advanced debugging and troubleshooting across kernel and user mode using WinDbg, crash dump analysis, and Sysinternals tools.
• Ensure compliance with Microsoft driver signing, PatchGuard, Secure Boot, and kernel security restrictions.
• Optimize agent performance to minimize system impact while maintaining visibility and protection.
• Participate in threat modeling, secure coding reviews, and internal security assessments.

Skills

C/C++ development

Windows driver development

Windows internals

WinDbg/Sysinternals

WFP/minifilters/ETW

Remote work experience

English communication

Tools

WinDbg

Sysinternals

Windows Driver Frameworks (WDF)

Job description

Hire Hangar Global is seeking a Windows Endpoint Security Developer to design and implement Windows endpoint services, including kernel-mode and user-mode modules, with a focus on AI-driven threat detection. This full-time remote role requires deep Windows internals knowledge and hands-on development experience.

You will build Windows drivers (WDM, KMDF, UMDF), implement secure hooks with WFP and ETW, and optimize performance while ensuring compliance with driver signing and Secure Boot.