Senior Kernel Software Developer

Threatlocker IncOrlando, FL
Onsite

About The Position

ThreatLocker® is a leader in endpoint protection technologies, providing enterprise-level cybersecurity tools to improve the security of servers and endpoints. The ThreatLocker® platform with Application Allowlisting, Ringfencing™, Storage Control, Elevation Control, Endpoint Network Control, Configuration Management, and Operational Alert solutions are leading the cybersecurity market toward a more secure approach of blocking the exploits of application vulnerabilities. We are seeking a Windows Kernel Driver Engineer with extensive experience in filter driver development and Windows system internals to join our cybersecurity product team. In this role, you will build and maintain critical kernel-mode components that power next-generation threat detection, prevention, and response capabilities on Windows systems. The role will be based in Orlando, FL and is an in-office position.

Requirements

  • 5+ years of hands-on experience writing Windows kernel-mode drivers, particularly filter drivers.
  • Expert knowledge of Windows system internals (memory management, I/O subsystem, object manager, etc.).
  • Proficiency in C/C++, Windows Driver Kit (WDK), and kernel debugging tools.
  • Experience in the cybersecurity domain, especially endpoint protection, EDR, anti-malware, or kernel-level monitoring.
  • Solid understanding of code injection techniques, hooking, kernel-mode exploits, and mitigation strategies.
  • Strong problem-solving skills and a security-first engineering mindset.

Nice To Haves

  • Experience with malware analysis, reverse engineering, or rootkit detection.
  • Familiarity with Windows kernel threat models and secure coding practices.
  • Exposure to Microsoft kernel-mode signing, WHQL, and driver submission processes
  • Contributions to the infosec community (research, publications, open-source projects, talks)

Responsibilities

  • Design and develop kernel-mode filter drivers (file system minifilter, registry filter, network filter, etc.) to support security monitoring and enforcement.
  • Investigate and reverse-engineer Windows internals to implement low-level security features and bypass-resistant protections.
  • Collaborate with the threat research, detection, and user-mode engineering teams to develop scalable and stealthy security solutions.
  • Perform in-depth kernel debugging, crash dump analysis, and performance tuning using WinDbg, ETW, and related tools.
  • Develop robust, secure, and maintainable driver code that meets Microsoft's signing and certification standards.
  • Monitor Windows platform changes to ensure compatibility and stability across OS versions.
© 2026 Teal Labs, Inc
Privacy PolicyTerms of Service