Windows Driver Security Researcher and Kernel Exploitation

Zealot Labs, Inc.; New York, Northern (NY, KY); Hybrid; USD 100,000 - 195,000; Full time

Benefits offered by this job

Equity

Job summary

Zealot Labs, Inc. in New York seeks a Windows kernel vulnerability researcher to uncover critical driver and kernel weaknesses. You will develop exploit primitives, analyze Windows drivers, and build automated tooling for vulnerability triage.

Experience in kernel internals, reverse engineering, and C/C++ is essential. The role is on-site in New York, with substantial ownership and equity since the company is early-stage and backs by top investors.

Qualifications

• Experience in Windows kernel vulnerability research and exploit development.
• Strong C/C++ skills for kernel-level development and exploitation.
• Proficiency with disassembly tools and static/dynamic analysis.
• Familiarity with Windows driver internals and driver analysis frameworks.

Responsibilities

• Discover and exploit vulnerabilities in Windows kernel-mode and user-mode drivers.
• Research attack surfaces across Windows drivers and kernel subsystems.
• Develop exploit primitives for privilege escalation, sandbox escape, and kernel code execution.
• Build automated tooling for Windows driver analysis, fuzzing, and vulnerability triage.
• Deep experience with Windows kernel internals: I/O manager, object manager, memory manager.
• Proven track record of driver vulnerability research (CVEs, ZDI submissions, or offensive work).
• Strong x86/x64 reverse engineering and exploit development skills.
• Proficiency with WinDbg, IDA/Ghidra, and driver analysis frameworks.
• Strong C/C++ skills for kernel-level development and exploitation.

Skills

Windows kernel

Kernel exploitation

C/C++

Reverse engineering

WinDbg

IDA/Ghidra

Tools

WinDbg

IDA

Ghidra

Job description

Zealot Labs, Inc. in New York seeks a Windows kernel vulnerability researcher to uncover critical driver and kernel weaknesses. You will develop exploit primitives, analyze Windows drivers, and build automated tooling for vulnerability triage.

Experience in kernel internals, reverse engineering, and C/C++ is essential. The role is on-site in New York, with substantial ownership and equity since the company is early-stage and backs by top investors.