Senior Kernel Software Developer
ThreatLockerResponsibilities
- Design and develop Windows kernel-mode filter drivers, including file system minifilters, registry filters, and network filters.
- Investigate and reverse-engineer Windows internals to implement low-level security features and bypass-resistant protections.
- Collaborate with threat research, detection, and user-mode engineering teams on scalable security solutions.
- Perform kernel debugging, crash dump analysis, and performance tuning using WinDbg, ETW, and related tools.
- Develop secure, robust, and maintainable driver code that meets Microsoft signing and certification standards.
- Monitor Windows platform changes to maintain compatibility and stability across operating system versions.
Requirements
- At least 5 years of hands-on experience writing Windows kernel-mode drivers, particularly filter drivers.
- Expert knowledge of Windows system internals, including memory management, the I/O subsystem, and the object manager.
- Proficiency in C, C++, the Windows Driver Kit, and kernel debugging tools.
- Experience in cybersecurity, especially endpoint protection, EDR, anti-malware, or kernel-level monitoring.
- Understanding of code injection techniques, hooking, kernel-mode exploits, and mitigation strategies.
- Strong problem-solving skills and a security-first engineering mindset.
- Preferred experience with malware analysis, reverse engineering, or rootkit detection.
- Preferred familiarity with Windows kernel threat models and secure coding practices.
- Preferred exposure to Microsoft kernel-mode signing, WHQL, and driver submission processes.
- Contributions to the information security community through research, publications, open-source projects, or talks are preferred.
Benefits
- Based in Orlando, Florida, with an in-office work arrangement.
- May require travel to company offices or property locations.
- Background check and drug/substance screening are required after a conditional offer.
- Randomized drug and substance testing is conducted approximately every 60 days.
- Reasonable workplace accommodations may be requested and evaluated.
About ThreatLocker
The ThreatLocker® story. ThreatLocker journey began with a mission to protect businesses from the devastating effects of cyberattacks. Co-founders Danny Jenkins, Sami Jenkins, and John Carolan set out to create solutions designed to eliminate the guessing game of cybersecurity. Danny Jenkins began his cybersecurity career in 1997, which included roles such as managing corporate IT, ethical hacking, and becoming an entrepreneur. A significant turning point occurred when Jenkins witnessed the aftermath of a severe phishing attack. The attack disrupted business operations and nearly resulted in the loss of the company. This incident underscored the critical gaps in existing reactive cybersecurity strategies and motivated Jenkins to develop a proactive, Zero Trust solution designed to give businesses more control over their defenses. With this commitment, along with Sami Jenkins and John Carolan, he co-founded ThreatLocker, making the Zero Trust approach to cybersecurity reality for many. In just a few years, over 50,000 businesses worldwide have embraced ThreatLocker solutions, a testament companies are ready to move beyond the endless game of trying to outsmart cybercriminals and are adopting instead new, proactive ways to defend against them with ThreatLocker redefining Zero Trust solutions.