Senior Low-Level Windows Engineer – EDR Kernel/Driver Remote

Palo Alto Networks; United States; Remote; USD 180,000 - 240,000; Full time

Job summary

Palo Alto Networks is seeking a Senior Low-Level Software Engineer to own kernel- and user-mode Windows components for the Cortex agent, delivering detection, prevention, and visibility across millions of endpoints. This high‑impact role requires deep expertise in C/C++, Windows internals, and cross‑team debugging.

You will handle escalations, analyze minidumps with WinDbg, and drive robust, fault‑tolerant designs. Remote, global teams with a focus on security and reliability.

Qualifications

• Deep, hands-on proficiency in C for both kernel- and user-mode Windows development.
• Strong command of modern C++ (C++17/20) for library integration.
• Extensive knowledge of NT kernel, I/O manager, memory manager, and Windows security model.
• Experience debugging kernel and user-mode code with WinDbg and crash dumps.
• Track record of root-causing complex failures across kernel, user mode, and third-party software.

Responsibilities

• Serve as the local technical authority for critical field issues with direct links to core R&D.
• Lead investigations for high-severity escalations and facilitate live debugging in prod-adjacent environments.
• Produce concise RCA reports and actionable guidance for support, PM, and engineering leadership.
• Design, implement, and maintain Windows kernel drivers and user-mode agent components.

Skills

C/C++ proficiency

Kernel/User-mode development

Windows internals

WinDbg debugging

Performance optimization

ETW/WPR/WPA tooling

Incident analysis

Low-level debugging

Education

Bachelor’s degree with 5 years experience or Master’s with 3 years or PhD

Tools

WinDbg

ETW/WPR/WPA

MINIDUMP analysis

Job description

Palo Alto Networks is seeking a Senior Low-Level Software Engineer to own kernel- and user-mode Windows components for the Cortex agent, delivering detection, prevention, and visibility across millions of endpoints. This high‑impact role requires deep expertise in C/C++, Windows internals, and cross‑team debugging.

You will handle escalations, analyze minidumps with WinDbg, and drive robust, fault‑tolerant designs. Remote, global teams with a focus on security and reliability.