Senior Windows Kernel Driver Engineer - Security & EDR

ADP, Inc.; Orlando (FL); On-site; USD 140,000 - 190,000; Full time

Job summary

ThreatLocker in Orlando, FL is seeking a Senior Kernel Software Developer to build and maintain kernel-mode components for threat detection and prevention on Windows systems. This in-office role requires strong experience with Windows kernel drivers and security-focused engineering.

You will design filter drivers, debug with WinDbg, and collaborate with threat research and user-mode teams to deliver scalable security solutions, with a focus on robust, signed drivers and compatibility across

Qualifications

• 5+ years of hands-on experience writing Windows kernel-mode drivers, particularly filter drivers.
• Expert knowledge of Windows system internals (memory management, I/O subsystem, object manager).
• Proficiency in C/C++, Windows Driver Kit (WDK), and kernel debugging tools.
• Experience in the cybersecurity domain, especially endpoint protection, EDR, or kernel-level monitoring.
• Solid understanding of code injection techniques, hooking, kernel-mode exploits, and mitigation strategies.
• Strong problem-solving skills and a security-first engineering mindset.

Responsibilities

• Design and develop kernel-mode filter drivers(file system minifilter, registry filter, network filter, etc.) to support security monitoring and enforcement.
• Investigate and reverse-engineer Windows internals to implement low-level security features and bypass-resistant protections.
• Collaborate with the threat research, detection, and user-mode engineering teams to develop scalable and stealthy security solutions.
• Perform in-depth kernel debugging, crash dump analysis, and performance tuning using WinDbg, ETW, and related tools.
• Develop robust, secure, and maintainable driver code that meets Microsoft's signing and certification standards.
• Monitor Windows platform changes to ensure compatibility and stability across OS versions.

Skills

Windows kernel-mode drivers

C/C++

WDK

Kernel debugging

Cybersecurity knowledge

Security mindset

Tools

WinDbg

ETW

Job description

ThreatLocker in Orlando, FL is seeking a Senior Kernel Software Developer to build and maintain kernel-mode components for threat detection and prevention on Windows systems. This in-office role requires strong experience with Windows kernel drivers and security-focused engineering.

You will design filter drivers, debug with WinDbg, and collaborate with threat research and user-mode teams to deliver scalable security solutions, with a focus on robust, signed drivers and compatibility across