Windows Kernel Software Developer

ThreatLocker; Orlando (FL); On-site; USD 140,000 - 190,000; Full time

Job summary

ThreatLocker Inc. is seeking a Windows Kernel Software Developer in Orlando, FL, to build and maintain kernel-mode components for its Zero Trust platform. The role focuses on filter driver development, file/process/registry/network monitoring, and secure driver design in an in-office setting.

You will work with cross-functional teams to ensure compatibility across Windows versions, perform debugging and performance tuning, and contribute to threat prevention at the kernel level.

Qualifications

• 5+ years of hands-on Windows kernel-mode driver development experience.
• Strong knowledge of Windows system internals, memory management, I/O, processes, and the object manager.
• Experience with the Windows Driver Kit (WDK).
• Strong experience with kernel debugging and crash analysis.
• Experience with Windows kernel synchronization, concurrency, and performance-sensitive code.
• Strong problem-solving skills and a security-first engineering mindset.

Responsibilities

• Design and develop Windows kernel-mode filter drivers, including file system minifilters, registry filters, and network filters.
• Implement security monitoring and enforcement for file, process, registry, and network activity.
• Investigate Windows internals to develop low-level security features and bypass-resistant protections.
• Perform kernel debugging, crash dump analysis, and performance tuning using WinDbg, ETW, WPP, and related tools.
• Develop secure, stable, and maintainable driver code.
• Maintain compatibility across supported Windows versions and platform changes.
• Collaborate with user-mode, QA, DevOps, and security engineering teams.

Skills

Windows kernel-mode development

Kernel debugging

Windows internals

Driver development

Security mindset

Tools

WDK

WinDbg

ETW

WPP tracing

Job description

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Windows Kernel Software Developer

DEVELOPMENT Full Time Orlando, FL, US

COMPANY OVERVIEW

ThreatLocker ® is a global cybersecurity leader that stops cyberattacks before they happen. The company’s Zero Trust Platform prevents breaches from both known and unknown threats by allowing only explicitly trusted software and activity across endpoints, networks, and cloud systems. Built to deploy quickly and scale across complex environments, the platform reduces operational overhead while keeping business running uninterrupted. Headquartered in Orlando, Florida, with offices in Dublin, Dubai, and Brisbane, ThreatLocker protects over 70,000 organizations worldwide.

POSITION OVERVIEW

We are seeking a Windows Kernel Software Developer with hands-on experience in filter driver development and Windows system internals to join our cybersecurity product team.

In this role, you will build and maintain critical kernel-mode components that support ThreatLocker’s Zero Trust security platform, including file, process, registry, and network monitoring and enforcement.

DEVELOPMENT – Full-Time

This role will be based in Orlando, FL and is an in-office position.

JOB SCOPE

The Kernel Developer will be responsible for, but not limited to:

• Design and develop Windows kernel-mode filter drivers, including file system minifilters , registry filters, and network filters.
• Implement security monitoring and enforcement for file, process, registry, and network activity.
• Investigate Windows internals to develop low-level security features and bypass-resistant protections.
• Perform kernel debugging, crash dump analysis, and performance tuning using WinDbg , ETW, WPP, and related tools.
• Develop secure, stable, and maintainable driver code.
• Maintain compatibility across supported Windows versions and platform changes.
• Collaborate with user-mode, QA, DevOps, and security engineering teams.

REQUIRED QUALIFICATIONS

• 5+ years of hands-on Windows kernel-mode driver development experience.
• Strong knowledge of Windows system internals, including memory management, I/O, processes, and the object manager.
• Experience with the Windows Driver Kit (WDK).
• Strong experience with kernel debugging and crash analysis.
• Experience with Windows kernel synchronization, concurrency, and performance-sensitive code.
• Strong problem-solving skills and a security-first engineering mindset.

PREFERRED QUALIFICATIONS

• Experience with Windows file system minifilters and Filter Manager.
• Experience with Windows Filtering Platform (WFP).
• Experience with registry filtering and process monitoring.
• Experience with endpoint security, EDR, anti-malware, application control, or Zero Trust products.
• Experience with WinDbg , Driver Verifier, ETW, and WPP tracing.
• Experience with reverse engineering or malware analysis.
• Familiarity with Windows kernel threat models and secure coding practices.
• Exposure to Microsoft driver signing, WHQL, HLK, and driver submission processes.
• Contributions to security research, open-source projects, publications, or technical talks.

WORKING CONDITIONS

• This is an in-office position based in Orlando, Florida.
• Job will generally be performed in an office environment but may require occasional travel.
• Must occasionally lift and/or move up to 25 pounds.

A background check and drug/substance screening are required after a conditional offer. Employment will proceed only upon receiving clear results from both.

ThreatLocker also conducts randomized drug and substance testing approximately every 60 days, in line with the same screening standards.