Windows End Point Security Developer

About the Role:
We are looking for an experienced Windows Endpoint Security Developer with strong expertise in C, C++, Windows Internals, and Windows Driver Development to build and enhance our AiDR protection platform.
In this role, you will initially focus on developing a Windows endpoint service that collects system, network, performance, and process telemetry. This data will support behavioral analytics and help detect, identify, and respond to security threats through AI-driven endpoint protection.
The ideal candidate should have a strong understanding of Windows OS fundamentals and internals, with a focus on performance, reliability, scalability, security, and continuous improvement.
This is a hands-on engineering role for someone passionate about building security-focused Windows endpoint solutions with an AI-driven approach.
Key Responsibilities:
Design and implement Windows endpoint services, including kernel-mode and user-mode components.
Develop Windows drivers using WDM, KMDF, and UMDF.
Build monitoring capabilities for file system, process, memory, and network activity.
Develop efficient endpoint telemetry and data-collection mechanisms for AI-based behavioral monitoring.
Implement secure hooks and filtering mechanisms using Windows Filtering Platform (WFP), Windows minifilters, and ETW.
Work closely with threat research teams to translate threat intelligence and research into endpoint telemetry and detection logic.
Perform advanced debugging and troubleshooting across kernel-mode and user-mode environments using WinDbg, crash dump analysis, and Sysinternals tools.
Ensure compliance with Microsoft driver signing requirements, PatchGuard, Secure Boot, and Windows kernel security restrictions.
Optimize endpoint agents to minimize CPU, memory, and system-resource impact while maintaining effective visibility and protection.
Participate in threat modeling, secure coding reviews, and internal security assessments.
Contribute to architecture discussions, technical design, code reviews, and continuous improvement of endpoint security capabilities.
Required Skills & Experience:
Proven experience developing Windows endpoint security products, such as AV, EDR, DLP, firewall, or intrusion prevention solutions.
Strong expertise in C and C++.
Hands-on experience with Windows Driver Development.
Strong understanding of Windows OS architecture, internals, and system-level programming.
Experience with kernel-mode and user-mode development.
Knowledge of kernel-mode communication mechanisms such as:
IOCTL
ALPC
Shared Memory
Proficiency with WinDbg and crash dump analysis.
Experience using Sysinternals tools for advanced Windows troubleshooting and analysis.
Strong knowledge of:
Windows Filtering Platform (WFP)
Windows Minifilters
Event Tracing for Windows (ETW)
Understanding of Microsoft driver signing, PatchGuard, Secure Boot, and Windows kernel security mechanisms.
Experience with threat modeling and secure coding practices.
Strong debugging, troubleshooting, and problem-solving skills.
Ability to write reliable, high-performance, and security-focused system-level code.

Work arrangement
No