About the Role:

We are looking for an experienced Windows Endpoint Security Developer with robust expertise in C, C++, Windows Internals, and Windows Driver Development to build and enhance our AiDR protection platform.

In this role, you will initially focus on developing a Windows endpoint service that collects system, network, performance, and process telemetry. This data will support behavioral analytics and help detect, identify, and respond to security threats through AI-driven endpoint protection.

The ideal candidate should have a strong understanding of Windows OS fundamentals and internals, with a focus on performance, reliability, scalability, security, and continuous improvement.

This is a hands-on engineering role for someone passionate about building security-focused Windows endpoint solutions with an AI-driven approach.

Key Responsibilities:

- Design and implement Windows endpoint services, including kernel-mode and user-mode components.
- Develop Windows drivers using WDM, KMDF, and UMDF.
- Build monitoring capabilities for file system, process, memory, and network activity.
- Develop efficient endpoint telemetry and data-collection mechanisms for AI-based behavioral monitoring.
- Implement secure hooks and filtering mechanisms using Windows Filtering Platform (WFP), Windows minifilters, and ETW.
- Work closely with threat research teams to translate threat intelligence and research into endpoint telemetry and detection logic.
- Perform advanced debugging and troubleshooting across kernel-mode and user-mode environments using WinDbg, crash dump analysis, and Sysinternals tools.




- Ensure compliance with Microsoft driver signing requirements, PatchGuard, Secure Boot, and Windows kernel security restrictions.
- Optimize endpoint agents to minimize CPU, memory, and system-resource impact while maintaining effective visibility and protection.
- Participate in threat modeling, secure coding reviews, and internal security assessments.
- Contribute to architecture discussions, technical design, code reviews, and continuous improvement of endpoint security capabilities.
- Required Skills & Experience:
- Proven experience developing Windows endpoint security products, such as AV, EDR, DLP, firewall, or intrusion prevention solutions.
- Strong expertise in C and C++.
- Hands-on experience with Windows Driver Development.
- Strong understanding of Windows OS architecture, internals, and system-level programming.
- Experience with kernel-mode and user-mode development.
- Knowledge of kernel-mode communication mechanisms such as:
- IOCTL
- ALPC
- Shared Memory
- Proficiency with WinDbg and crash dump analysis.
- Experience using Sysinternals tools for advanced Windows troubleshooting and analysis.
- Strong knowledge of:
- Windows Filtering Platform (WFP)
- Windows Minifilters
- Event Tracing for Windows (ETW)
- Understanding of Microsoft driver signing, PatchGuard, Secure Boot, and Windows kernel security mechanisms.
- Experience with threat modeling and secure coding practices.
- Strong debugging, troubleshooting, and problem-solving skills.
- Ability to write reliable, high-performance, and security-focused system-level code.

📌 Windows End Point Security Developer (India)
🏢 RedBlink
📍 India