Senior Windows Kernel Software Developer

ThreatLocker, Inc.; Orlando (FL); On-site; USD 140,000 - 190,000; Full time

Job summary

ThreatLocker is seeking a Senior Windows Kernel Software Developer in Orlando to design, implement, and maintain kernel-mode filter drivers and security features for the Zero Trust platform. You will tackle file, process, registry, memory, and network monitoring while ensuring compatibility across Windows versions and high reliability in a security-focused environment.

Join a global cybersecurity team collaborating with QA, user-mode, security engineering, and threat research to deliver robust

Qualifications

• 7+ years of hands-on Windows kernel-mode driver development.
• Expert knowledge of Windows system internals (memory, I/O, processes, synchronization).
• Extensive experience with the Windows Driver Kit (WDK).
• Advanced kernel debugging, crash analysis, and performance profiling.
• Experience with Windows kernel synchronization and high-concurrency code.
• Security-focused solutions such as endpoint protection or monitoring.
• Strong understanding of Windows security concepts including code injection, hooking, and mitigations.
• Security-first mindset and strong problem-solving skills.

Responsibilities

• Design, develop, and maintain Windows kernel-mode filter drivers (minifilters, registry, network).
• Architect and implement advanced security monitoring and enforcement for file, process, registry, memory and network activity.
• Investigate Windows internals to develop low-level security features and bypass-resistant protections.
• Perform kernel debugging, crash dump analysis, and performance tuning using WinDbg and ETW.
• Develop secure, stable, scalable, and maintainable driver code.
• Maintain compatibility across Windows versions and platform changes.
• Collaborate with user-mode, QA, DevOps, security engineering, and threat research teams.

Skills

Kernel-mode driver

Windows internals

Memory management

I/O concepts

Process synchronization

Security concepts

Code injection

Hooking techniques

Debugging & profiling

Problem solving

Security mindset

Tools

Windows Driver Kit (WDK)

Job description

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

SENIOR WINDOWS KERNEL SOFTWARE DEVELOPER

Full Time Orlando, FL, US

COMPANY OVERVIEW

ThreatLocker ® is a global cybersecurity leader that stops cyberattacks before they happen. The company’s Zero Trust Platform prevents breaches from both known and unknown threats by allowing only explicitly trusted software and activity across endpoints, networks, and cloud systems. Built to deploy quickly and scale across complex environments, the platform reduces operational overhead while keeping business running uninterrupted. Headquartered in Orlando, Florida, with offices in Dublin, Dubai, and Brisbane, ThreatLocker protects over 70,000 organizations worldwide.

POSITION OVERVIEW

We are seeking a Senior Windows Kernel Software Developer with hands‑on experience in filter driver development and Windows system internals to join our cybersecurity product team. In this role, you will build and maintain critical kernel-mode components that support ThreatLocker’s Zero Trust security platform, including file, process, registry, and network monitoring and enforcement.

JOB SCOPE

The Senior Windows Kernel Developer will be responsible for, but not limited to:

• Design, develop, and maintain Windows kernel-mode filter drivers, including file system minifilters, registry filters, and network filters.
• Architect and implement advanced security monitoring and enforcement capabilities for file, process, registry, memory, and network activity.
• Investigate Windows internals to develop low-level security features, bypass-resistant protections, and innovative endpoint security capabilities.
• Perform advanced kernel debugging, crash dump analysis, and performance tuning using WinDbg, ETW, WPP, and related tools.
• Develop secure, stable, scalable, and maintainable driver code.
• Maintain compatibility across supported Windows versions and platform changes while driving adoption of new Windows platform capabilities.
• Collaborate with user‑mode, QA, DevOps, security engineering, and threat research teams to deliver cohesive security solutions.

REQUIRED QUALIFICATIONS

• 7+ years of hands‑on Windows kernel-mode driver development experience.
• Expert knowledge of Windows system internals, including memory management, I/O, processes, synchronization, security mechanisms, and the object manager.
• Extensive experience with the Windows Driver Kit (WDK).
• Advanced experience with kernel debugging, crash analysis, and performance profiling.
• Experience with Windows kernel synchronization, concurrency, and performance‑sensitive code.
• Experience developing security‑focused solutions such as endpoint protection, EDR, anti‑malware, or system monitoring technologies.
• Strong understanding of Windows security concepts, including code injection techniques, hooking methodologies, kernel‑mode exploits, and mitigation strategies.
• Strong problem‑solving skills and a security‑first engineering mindset.

WORKING CONDITIONS

The duties described below are representative of those encountered while performing the essential functions of this position. If necessary, reasonable accommodation may be requested and will be evaluated for its relationship to the essential functions that must be performed.

• Job will generally be performed in an office environment but may require travel to visit company offices and/or property locations.
• While performing duties of this job, would occasionally require to stand , walk, sit, reach with hands and arms, climb or balance, stoop or kneel, talk and hear, and use fingers and hands to feel objects and tools.
• Must occasionally lift and/or move up to 25 pounds.
• Specific vision abilities required include close vision, distance vision, depth perceptions, and the ability to adjust focus.

A background check and drug/substance screening are required after a conditional offer. Employment will proceed only upon receiving clear results from both.

ThreatLocker also conducts randomized drug and substance testing approximately every 60 days, in line with the same screening standards.