Remote Windows Endpoint Security Developer (C/C++, Drivers)

Hire Hangar Global; Cape Town; Teletrabalho; ZAR 1 983 000 - 2 974 000; Tempo integral

Resumo da oferta

Hire Hangar Global is seeking a Windows Endpoint Security Developer with strong C/C++ and Windows driver development skills to build an AI-focused endpoint protection platform. The role focuses on creating Windows services and drivers to collect data for threat detection, with emphasis on Windows internals and secure, high-performance code.

You will work remotely with US time zones, contributing to kernel-mode and user-mode components, telemetry pipelines, and threat research efforts.

Qualificações

• Experience in Windows endpoint security products (AV/EDR/DLP/firewall) is required.
• Deep expertise in C/C++ and Windows driver development.
• Strong knowledge of Windows OS fundamentals and internals.
• Experience with kernel-mode IPC and debugging.
• Proficient in WinDbg, crash dump analysis, and Sysinternals tools.
• Familiarity with WFP, minifilters, and ETW.
• Understanding of Microsoft driver signing, PatchGuard, and Secure Boot.
• Excellent written and spoken English; remote-work experience essential.

Responsabilidades

• Design and implement Windows endpoint services, including kernel-mode and user-mode modules.
• Develop Windows drivers to monitor file system, processes, memory, and network activity.
• Build telemetry-focused data collection for AI-driven threat detection.
• Implement secure hooks and filters using WFP, minifilters, and ETW.
• Collaborate on threat research and translate findings into detection logic.
• Debug and troubleshoot across kernel and user mode with WinDbg and Sysinternals.

Conhecimentos

C/C++

Windows driver development

Windows OS internals

Kernel-mode communication

WinDbg/Sysinternals

Remote collaboration

Ferramentas

WDM/KMDF/UMDF

WFP/minifilters/ETW

IOCTL/ALPC/shared memory

Descrição da oferta de emprego

Hire Hangar Global is seeking a Windows Endpoint Security Developer with strong C/C++ and Windows driver development skills to build an AI-focused endpoint protection platform. The role focuses on creating Windows services and drivers to collect data for threat detection, with emphasis on Windows internals and secure, high-performance code.

You will work remotely with US time zones, contributing to kernel-mode and user-mode components, telemetry pipelines, and threat research efforts.