Senior Windows Kernel Driver Engineer - Security

Threatlocker Inc; Orlando (FL); On-site; USD 150,000 - 190,000; Full time

Job summary

ThreatLocker is seeking a Windows Kernel Driver Engineer to design and maintain kernel-mode components powering threat detection on Windows. The role is in-office in Orlando, FL, and requires extensive kernel development experience.

You will build and optimize filter drivers, investigate Windows internals, and collaborate with threat research and user-mode teams to deliver scalable security solutions while ensuring compatibility across Windows versions and adherence to signing standards.

Qualifications

• 5+ years of hands-on experience writing Windows kernel-mode drivers, particularly filter drivers.
• Deep knowledge of Windows internals (memory management, I/O subsystem, object manager).
• Proficiency in C/C++, Windows Driver Kit (WDK), and kernel debugging tools.
• Experience in the cybersecurity domain, especially endpoint protection or kernel-level monitoring.
• Solid understanding of code injection techniques, hooking, kernel-mode exploits, and mitigation strategies.
• Security-first engineering mindset.

Responsibilities

• Design and develop kernel-mode filter drivers (file system minifilter, registry filter, network filter, etc.).
• Investigate and reverse-engineer Windows internals to implement low-level security features.
• Collaborate with threat research, detection, and user-mode teams to develop scalable security solutions.
• Perform in-depth kernel debugging, crash dump analysis, and performance tuning using WinDbg, ETW, and related tools.
• Develop robust, secure, and maintainable driver code that meets Microsoft's signing and certification standards.
• Monitor Windows platform changes to ensure compatibility across OS versions.

Skills

Windows kernel-mode development

C/C++

WDK

Kernel debugging

Security mindset

Tools

WinDbg

ETW

Job description

ThreatLocker is seeking a Windows Kernel Driver Engineer to design and maintain kernel-mode components powering threat detection on Windows. The role is in-office in Orlando, FL, and requires extensive kernel development experience.

You will build and optimize filter drivers, investigate Windows internals, and collaborate with threat research and user-mode teams to deliver scalable security solutions while ensuring compatibility across Windows versions and adherence to signing standards.