Remote Windows Endpoint Security Engineer (C/C++, Drivers)

OpenKrill; United States; Remote; USD 150,000 - 190,000; Full time

Job summary

Hire Hangar is seeking a Windows Endpoint Security Developer (C/C++ & Driver Development) to build a next‑gen AI‑driven protection platform in a remote US‑time‑zone friendly role. You will design kernel‑ and user‑mode services, develop Windows drivers, and optimize data collection for threat detection.

The role requires deep Windows internals knowledge, WinDbg and Sysinternals proficiency, and practical experience with WFP, minifilters, and ETW.

Qualifications

• Experience with Windows endpoint security products (AV, EDR, DLP, firewall) is required.
• Deep C/C++ expertise and Windows driver development experience.
• Strong knowledge of Windows OS fundamentals and internals.
• Experience with kernel-mode communication (IOCTL, ALPC, shared memory).
• Proficient with WinDbg, crash dump analysis, and Sysinternals tools.
• Familiar with WFP, minifilters, ETW and driver signing concepts.
• Excellent written and spoken English; remote-work experience with US/UK teams is preferred.

Responsibilities

• Design and implement Windows endpoint services, including kernel-mode and user-mode components.
• Develop Windows drivers (WDM, KMDF, UMDF) to monitor system activity.
• Build data collection features for AI behavioral monitoring.
• Implement secure hooks and filters using WFP, minifilters, and ETW.
• Collaborate on threat research and translate into detection logic.
• Debug and troubleshoot across kernel and user modes with WinDbg and Sysinternals.
• Ensure compliance with driver signing, PatchGuard, and Secure Boot.
• Optimize agent performance while maintaining visibility and protection.

Skills

C

C++

Windows driver development

Windows internals

English communication

Tools

Windows Driver Frameworks

WFP

minifilters

ETW

WinDbg

Sysinternals

IOCTL

ALPC

Secure Boot

Job description

Hire Hangar is seeking a Windows Endpoint Security Developer (C/C++ & Driver Development) to build a next‑gen AI‑driven protection platform in a remote US‑time‑zone friendly role. You will design kernel‑ and user‑mode services, develop Windows drivers, and optimize data collection for threat detection.

The role requires deep Windows internals knowledge, WinDbg and Sysinternals proficiency, and practical experience with WFP, minifilters, and ETW.