Windows System Software Engineer

Design and develop production-quality Windows kernel drivers using WDM/WDF.

Build kernel instrumentation and telemetry pipelines for endpoint visibility.

Develop high-performance process, thread, and image lifecycle tracking.

Implement scalable kernel callback infrastructure using: Process notifications Thread notifications Image load notifications Object callbacks Registry callbacks

Process notifications

Thread notifications

Image load notifications

Object callbacks

Registry callbacks

Design lock-efficient kernel data structures and synchronization strategies.

Build reliable user/kernel communication mechanisms.

Debug complex concurrency, synchronization, and memory issues.

Work directly with Windows NT internals beyond documented APIs.

Build systems that understand process, thread, memory, and object lifecycles.

Analyze scheduler behavior, process creation, and teardown.

Work with Windows internals including: Memory management Object Manager Executive subsystems ETW ALPC Handle tables Tokens Registry internals

Memory management

Object Manager

Executive subsystems

ETW

ALPC

Handle tables

Tokens

Registry internals

Investigate compatibility across multiple Windows releases.

Debug boot-time, runtime, and kernel crash scenarios.

Design telemetry systems that power endpoint detection and response.

Build behavioral detection capabilities using operating system telemetry.

Research modern attack techniques and operating system abuse.

Improve visibility into process execution, code loading, and system activity.

Design resilient monitoring systems that operate in complex enterprise environments.

Evaluate modern Windows security features and how they impact endpoint architecture.

Analyze Windows internals and system behavior.

Debug kernel crashes, memory corruption, and race conditions.

Reverse engineer operating system components when documentation is unavailable.

Use debugging and reverse engineering tools to understand low-level execution paths.

Extensive experience building low-level Windows systems software.

Deep expertise in Windows kernel architecture and NT internals.

Extensive experience developing Windows kernel drivers.

Strong knowledge of process, thread, memory, and object management.

Expert-level C/C++ programming skills.

Experience debugging complex multithreaded systems.

Strong understanding of synchronization, paging, interrupts, and x64 architecture.

Experience using WinDbg and kernel debugging tools.

Ability to reason about undocumented operating system behavior through analysis and debugging.

Rust experience.

Filesystem minifilters.

Windows Filtering Platform (WFP) or NDIS.

ETW provider development.

Hypervisor technologies (VT-x / AMD-V).

Secure Kernel, VBS, or HVCI knowledge.

Memory forensics or reverse engineering experience.

Symbol parsing and Windows build analysis.

We offer competitive compensation and a comprehensive benefits package designed to support our employees’ health, well-being, and long-term success. The expected salary range for this position is $150,000 – $250,000 per year. Within this range, individual pay is determined based on job-related factors including skills, experience, qualifications, and internal equity. Most candidates can expect an offer within the range listed above. Your recruiter will provide additional details on compensation and benefits to qualified candidates during the hiring process.

We’re committed to building a diverse, inclusive workplace where everyone can do their best work. We are proud to be an equal opportunity employer and do not discriminate on the basis of race, religion, color, national origin, sex, sexual orientation, age, veteran status, disability, genetic information, or other applicable legally protected characteristic. If you require a reasonable accommodation during the application or interview process, please let us know — we’re happy to support you.