Position overview

We're looking for an expert Windows Kernel Driver Engineer to join our team and help build and enhance the core technology behind Windows cybersecurity agents. In this role, you'll design and implement low-level Windows components, focusing on Windows kernel drivers, that power and support advanced threat detection and response capabilities. You'll work closely with security researchers, sensor developers, and platform engineers to ensure agents are secure, stealthy, and performant across all supported environments.

This role requires candidates who are currently and actively working on Windows kernel driver development and have been doing so for at least the last 2 years, utilizing C++ as their main language. Deep expertise in and knowledge of Windows OS internals are a must. KMDF (Kernel-Mode Driver Framework) experience is also required.

Responsibilities

- Build Windows kernel-mode drivers and user-mode services that collect, filter, and analyze endpoint telemetry.
- Design and develop low-level components for the Windows endpoint sensor, focusing on stability, performance, and stealth.
- Implement robust techniques for process/thread monitoring, registry tracking, file system interception, and network event visibility.
- Debug complex kernel-mode and user-mode issues across multiple Windows versions.
- Collaborate with researchers and product teams to translate threat intelligence into product features.
- Conduct code reviews, mentor engineers, and contribute to architectural decisions.
- Stay current with Windows internals, security trends, and system programming best practices.





Requirements

- Recent, hands-on experience developing Windows kernel drivers (for at least the last 2 years) using KMDF, Windows Filtering Platform (WFP), minifilters, and ETW.
- 7+ years of hands-on experience in C++ development (C++11 or later).
- In-depth understanding of Windows internals, including kernel architecture, system calls, memory management, and drivers.
- Strong debugging and reverse engineering skills using tools such as WinDbg, Process Monitor, Process Explorer, IDA, or Ghidra.
- Familiarity with Windows security mechanisms, including integrity levels, UAC, AppLocker, and Secure Boot.
- Experience using Visual Studio, Windows Driver Kit (WDK), and related development environments.

Nice to have

- Experience developing with Rust.
- Experience building or contributing to endpoint security products (EDR, AV, EPP, etc.).
- Familiarity with Windows telemetry, Event Logs, Sysmon, and ETW tracing.
- Experience with malware analysis, Windows exploitation techniques, or SOC/DFIR workflows.
- Experience in the cybersecurity domain is a plus.
- Scripting skills in PowerShell or Python for automation and testing.
- Understanding of kernel-mode security evasion techniques and defensive mechanisms.




- Experience with code signing, driver deployment, and secure update mechanisms.
- Bachelor's degree in Computer Science, Software Engineering, or equivalent practical experience.

Pay: ₹5,100,000.00 - ₹6,400,000.00 per year

Ability to commute/relocate:

- Bengaluru, Karnataka: Reliably commute or planning to relocate before starting work (Required)

Application Question(s):

- Are you currently working on Windows kernel driver development? If yes, how long have you been doing this continuously in your current/recent role?
- What Windows driver technologies have you worked with hands-on? Please specify your experience with:
- How many years of professional C++ development experience do you have, and what version(s) of C++ have you primarily used?
- Can you describe the most recent Windows kernel driver you personally developed or maintained? What was its purpose and what parts did you own?
- How familiar are you with Windows security mechanisms such as UAC, integrity levels, AppLocker, and Secure Boot? Which have you worked with hands-on?
- Do you use PowerShell or Python for automation, testing, debugging, or security research?
- Please list your last two roles/projects involving Windows kernel driver development, including the dates, technologies used (KMDF/WFP/minifilter/ETW), and your specific responsibilities.

Education:

- Bachelor's (Required)

Experience:

- KMDF: 2 years (Required)
- C++: 7 years (Required)

Location:

- Bengaluru, Karnataka (Preferred)

Work Location: In person

📌 Expert Windows Driver Engineer (Bengaluru)
🏢 The Wolf Works
📍 Bengaluru