Remote Windows Endpoint Security Engineer (C/C++ Drivers)

Hire Hangar, Inc.; South Africa; Remote; ZAR 2.313.000 - 3.139.000; Vollzeit

Zusammenfassung

Hire Hangar, Inc. is seeking a Windows Endpoint Security Developer with strong C, C++, and Windows driver development to help build an AI-focused endpoint protection platform.

This is a full-time, hands-on engineering role working remotely with US time zones. The first focus will be building a Windows service that collects system, network, and process data to detect and respond to threats, leveraging Windows internals, kernel-mode and user-mode modules, WFP and ETW.

Qualifikationen

• Extensive experience with Windows endpoint security products including AV/EDR.
• Deep expertise in C, C++, and Windows driver development.
• Strong understanding of Windows OS fundamentals and internals.
• Experience with kernel-mode communication mechanisms (IOCTL, ALPC, shared memory).

Aufgaben

• Design and implement Windows endpoint services, including kernel-mode and user-mode modules.
• Develop Windows drivers (WDM, KMDF, UMDF) to monitor activity.
• Build features that drive efficient data collection focused on AI behavioral monitoring.
• Implement secure hooks and filters using Windows Filtering Platform (WFP), minifilters, and ETW.
• Collaborate with the team on threat research strategies and translate them into detection logic using endpoint telemetry.
• Perform advanced debugging and troubleshooting across kernel and user mode using WinDbg, crash dump analysis, and Sysinternals tools.
• Ensure compliance with Microsoft driver signing, PatchGuard, Secure Boot, and kernel security restrictions.
• Optimize agent performance to minimize system impact while maintaining visibility and protection.
• Participate in threat modeling, secure coding reviews, and internal security assessments.

Kenntnisse

C

C++

Windows driver development

Windows OS fundamentals

Remote work experience

English communication

Threat modeling

Secure coding practices

WinDbg

Sysinternals tools

Tools

Windows Driver Frameworks (WDM, KMDF, UMDF)

Windows Filtering Platform (WFP)

minifilters

ETW

IOCTL/ALPC

Slack

Zoom

Jobbeschreibung

Hire Hangar, Inc. is seeking a Windows Endpoint Security Developer with strong C, C++, and Windows driver development to help build an AI-focused endpoint protection platform.

This is a full-time, hands-on engineering role working remotely with US time zones. The first focus will be building a Windows service that collects system, network, and process data to detect and respond to threats, leveraging Windows internals, kernel-mode and user-mode modules, WFP and ETW.