Windows Endpoint Security Developer
加入 Hire Hangar,并与快速增长的全球公司合作，同时建立一个长期职业生涯。工作标题：Windows 端点安全开发人员 （C/C++和驾驶员开发）地址 ◎远程时间区 ◎美国时区 (ESTPST) 角色概述：我们正在寻找具有强大的 C,C++,Windows 驱动程序开发技能的 Windows 端点安防开发人员来帮助构建基于 AI 的终点保护平台。这是全日制实践工程角色。你的首要任务将是构建一个收集系统，网络和处理数据以检测和响应威胁的 Windows 服务。理想候选人了解 Windows 内部内容很好，并且喜欢构建快速可靠的安全软件。主要责任：- 设计和实施 Windows 终端服务，包括内核模式和用户模式模块 - 开发 Windows 驱动程序 (WDM,KMDF,UMDF) 来监控文件系统，进程，内存和网络活动 - 建立以人工智能行为监测为重点的高效数据收集功能 - 使用 Windows 过平台 (WFP),迷你筛选器和 ETW 实现安全子和筛选器 - 与团队合作研究威胁策略并将其转化成使用终端遥度逻辑 - 使用 WinDbg,崩盘分析和 Sysinternals 工具进行先进的对核和用户模式中的调试和故障解决 - 确保遵守微软驱动程序签署，PatchGuard,Secure Boot 和内核安全限制 - 优化代理性能以尽量减少系统影响，同时保持可见性和保护 - 参加威胁建模，安全编码审查和内部安全评估所需的资格：- 在 Windows 端点安全产品 （如 AV,EDR,DLP,防火墙或侵入预防）上工作经验 （不可谈判）- C,C++,Windows 驱动程序开发方面的深入专业知识 - 深切了解 Windows OS 基础和内部内容 - 与内核模式通信机制 （IOCTL,ALPC,共享存储器）的经验 - 熟练使用 WinDbg,崩倾倒分析和 Sysinternals 工具 - 对 Windows 过平台 (WFP),微波及器和 ETW 的知识 - 了解 Microsoft 驱动程序签名，PatchGuard 和安全启动 - 有威胁建模和安全编码实践经验 - 具有明确的专业沟通风格的强有力的书面和语音英语 - 必须拥有以前远程工作经验，流利地处理远程合作伙伴
查看英文原文
Join Hire Hangar and work with fast-growing global companies while building a long-term career.
Job Title: Windows Endpoint Security Developer (C/C++ & Driver Development)
Location | Remote
Time Zone | US Time Zones (EST–PST)
Role Overview:
We are seeking a Windows Endpoint Security Developer with strong C, C++, and Windows driver development skills to help build an AI-focused endpoint protection platform. This is a full-time, hands-on engineering role. Your first focus will be building a Windows service that collects system, network, and process data to detect and respond to threats. The ideal candidate knows Windows internals well and enjoys building fast, reliable security software.
Key Responsibilities:
- Design and implement Windows endpoint services, including kernel-mode and user-mode modules
- Develop Windows drivers (WDM, KMDF, UMDF) to monitor file system, process, memory, and network activity
- Build features that drive efficient data collection focused on AI behavioral monitoring
- Implement secure hooks and filters using Windows Filtering Platform (WFP), minifilters, and ETW
- Collaborate with the team on threat research strategies and translate them into detection logic using endpoint telemetry
- Perform advanced debugging and troubleshooting across kernel and user mode using WinDbg, crash dump analysis, and Sysinternals tools
- Ensure compliance with Microsoft driver signing, PatchGuard, Secure Boot, and kernel security restrictions
- Optimize agent performance to minimize system impact while maintaining visibility and protection
- Participate in threat modeling, secure coding reviews, and internal security assessments
Required Qualifications:
- Experience working on Windows endpoint security products such as AV, EDR, DLP, firewall, or intrusion prevention (non-negotiable)
- Deep expertise in C, C++, and Windows driver development
- Strong understanding of Windows OS fundamentals and internals
- Experience with kernel-mode communication mechanisms (IOCTL, ALPC, shared memory)
- Proficiency with WinDbg, crash dump analysis, and Sysinternals tools
- Knowledge of Windows Filtering Platform (WFP), minifilters, and ETW
- Understanding of Microsoft driver signing, PatchGuard, and Secure Boot
- Experience with threat modeling and secure coding practices
- Strong written and spoken English with a clear, professional communication style
- Must have prior remote work experience, be fluent with remote collaboration tools and platforms (such as Slack, Zoom, Google Workspace, Asana, or similar), and have ideally worked with US or UK-based companies. Applications without this experience will not be considered.
Preferred Qualifications:
- Familiarity with cross-platform endpoint security (macOS/Linux)
- Experience building telemetry or behavioral analytics pipelines for threat detection
- Exposure to AI/ML-driven security products or monitoring AI agent activity
Tools & Technology:
- C and C++
- Windows Driver Frameworks (WDM, KMDF, UMDF)
- Windows Filtering Platform (WFP), minifilters, and ETW
- WinDbg and Sysinternals tools
- Slack, Zoom, and other remote collaboration tools
Please NOTE:
It is crucial that you complete the application form in full. As part of the application process, you will be required to record a video. If your application is successful, you will receive an email confirming next steps—the video is the first step of the interview process. If you do not record a video, we will not be able to consider you for ANY open roles.
We connect top talent with vetted employers, competitive pay, and real growth opportunities.