Windows Endpoint Security Developer
At a glance
Mid-level Security Engineering role at Hire Hangar. Remote, India · contract.
Pay not stated Security Engineering salary
remoteroles summary, based on the employer's posting.
What you'll do
- Build Windows services and drivers that gather system, network, process, file, memory, and other endpoint activity
- Turn threat research into detection logic, using endpoint telemetry to support behavioral monitoring
- Use WFP, minifilters, and ETW to observe activity through secure hooks and filters
- Debug kernel and user-mode issues with WinDbg, crash dumps, and Sysinternals tools
- Keep the agent efficient while meeting driver security rules and supporting threat modeling and secure-code reviews
What you bring
- You have built Windows endpoint security products such as antivirus, EDR, DLP, firewall, or intrusion prevention tools
- You bring deep C and C++ skills plus substantial Windows driver development experience
- You understand Windows internals, kernel communication methods, and tools for debugging drivers and crashes
- You know WFP, minifilters, ETW, Microsoft driver signing, PatchGuard, and Secure Boot
- You have remote-work experience, communicate professionally in English, and can collaborate with remote tools
Who this fits
This is a hands-on engineering role focused on Windows endpoint security, suited to someone with direct product experience and strong driver skills. The role is remote and requires working across US time zones. Prior remote work is required, and applicants must submit a video as the first interview step.
From the employer
Join Hire Hangar and work with fast-growing global companies while building a long-term career.
Job Title: Windows Endpoint Security Developer (C/C++ & Driver Development)
Location | Remote
Time Zone | US Time Zones (EST–PST)
Role Overview:
We are seeking a Windows Endpoint Security Developer with strong C, C++, and Windows driver development skills to help build an AI-focused endpoint protection platform. This is a full-time, hands-on engineering role. Your first focus will be building a Windows service that collects system, network, and process data to detect and respond to threats. The ideal candidate knows Windows internals well and enjoys building fast, reliable security software.
Key Responsibilities:
Design and implement Windows endpoint services, including kernel-mode and user-mode modules
Develop Windows drivers (WDM, KMDF, UMDF) to monitor file system, process, memory, and network activity
Build features that drive efficient data collection focused on AI behavioral monitoring
Implement secure hooks and filters using Windows Filtering Platform (WFP), minifilters, and ETW
Collaborate with the team on threat research strategies and translate them into detection logic using endpoint telemetry
Perform advanced debugging and troubleshooting across kernel and user mode using WinDbg, crash dump analysis, and Sysinternals tools
Ensure compliance with Microsoft driver signing, PatchGuard, Secure Boot, and kernel security restrictions
Optimize agent performance to minimize system impact while maintaining visibility and protection
Participate in threat modeling, secure coding reviews, and internal security assessments
Required Qualifications:
Experience working on Windows endpoint security products such as AV, EDR, DLP, firewall, or intrusion prevention (non-negotiable)
Deep expertise in C, C++, and Windows driver development
Strong understanding of Windows OS fundamentals and internals
Experience with kernel-mode communication mechanisms (IOCTL, ALPC, shared memory)
Proficiency with WinDbg, crash dump analysis, and Sysinternals tools
Knowledge of Windows Filtering Platform (WFP), minifilters, and ETW
Understanding of Microsoft driver signing, PatchGuard, and Secure Boot
Experience with threat modeling and secure coding practices
Strong written and spoken English with a clear, professional communication style
Must have prior remote work experience, be fluent with remote collaboration tools and platforms (such as Slack, Zoom, Google Workspace, Asana, or similar), and have ideally worked with US or UK-based companies. Applications without this experience will not be considered.
Preferred Qualifications:
Familiarity with cross-platform endpoint security (macOS/Linux)
Experience building telemetry or behavioral analytics pipelines for threat detection
Exposure to AI/ML-driven security products or monitoring AI agent activity
Tools & Technology:
C and C++
Windows Driver Frameworks (WDM, KMDF, UMDF)
Windows Filtering Platform (WFP), minifilters, and ETW
WinDbg and Sysinternals tools
Slack, Zoom, and other remote collaboration tools
Please NOTE:
It is crucial that you complete the application form in full. As part of the application process, you will be required to record a video. If your application is successful, you will receive an email confirming next steps—the video is the first step of the interview process. If you do not record a video, we will not be able to consider you for ANY open roles.
We connect top talent with vetted employers, competitive pay, and real growth opportunities.
Security Engineering work from LinkedIn, X, Reddit and Upwork, in one list.
Each morning you get everything that fits, strongest first.
Security EngineeringRemote
Find me workBy the team behind remoteroles.