Windows Driver Security Engineer - Kernel Exploit

Zealot Labs, Inc.; New York (NY); On-site; USD 100,000 - 195,000; Full time

Job summary

Zealot Labs, Inc. is an early-stage cybersecurity startup in New York focusing on Windows kernel security research. You will join a small, ownership-driven team to uncover driver and kernel vulnerabilities, craft exploit primitives, and build automated tooling for driver analysis and fuzzing.

The role emphasizes deep kernel expertise, vulnerability research, and practical penetration testing. This is a hands-on, highly technical position with strong compensation and equity potential.

Qualifications

• Discover and exploit vulnerabilities in Windows kernel-mode and user-mode drivers.
• Research attack surfaces across WDDM display drivers, network miniport drivers, filesystem filter drivers, and third-party kernel extensions.
• Develop exploit primitives for privilege escalation, sandbox escape, and kernel code execution.
• Build automated tooling for Windows driver analysis, fuzzing, and vulnerability triage.
• Deep experience with Windows kernel internals: I/O manager, object manager, memory manager.
• Proven track record of driver vulnerability research (CVEs, ZDI submissions, or security research).
• Strong x86/x64 reverse engineering and exploit development skills.
• Proficiency with WinDbg, IDA/Ghidra, and driver analysis frameworks.

Responsibilities

• Discover and exploit vulnerabilities in Windows kernel-mode and user-mode drivers.
• Research attack surfaces across Windows drivers and kernel extensions.
• Develop exploit primitives for privilege escalation and sandbox escape.
• Build automated tooling for Windows driver analysis, fuzzing, and vulnerability triage.
• Deep experience with Windows kernel internals: I/O manager, object manager, memory manager.
• Proven track record of driver vulnerability research (CVEs, ZDI submissions, or security research).
• Strong x86/x64 reverse engineering and exploit development skills.
• Proficiency with WinDbg, IDA/Ghidra, and driver analysis frameworks.

Skills

Windows kernel

Reverse engineering

Exploit development

WinDbg

IDA/Ghidra

Tools

Driver analysis frameworks

Fuzzing tooling

Job description

Zealot Labs, Inc. is an early-stage cybersecurity startup in New York focusing on Windows kernel security research. You will join a small, ownership-driven team to uncover driver and kernel vulnerabilities, craft exploit primitives, and build automated tooling for driver analysis and fuzzing.

The role emphasizes deep kernel expertise, vulnerability research, and practical penetration testing. This is a hands-on, highly technical position with strong compensation and equity potential.