Expert Windows Driver Engineer

About the Expert Windows Driver Engineer Position Overview: DataArt seeks an expert Windows Kernel Driver Engineer to join our team and contribute to building core Windows cybersecurity agents. This role involves designing and implementing low-level Windows components, focusing on Windows kernel drivers, to enhance advanced threat detection and response capabilities. You will collaborate with security researchers, sensor developers, and platform engineers to ensure agents are stable, stealthy, and performant across all supported environments. Key Responsibilities:

• Build Windows kernel-mode drivers and user-mode services to collect, filter, and analyze endpoint telemetry.
• Design and develop low-level components for Windows endpoint sensors, emphasizing stability, performance, and stealth.
• Implement techniques for process/thread monitoring, registry tracking, file system interception, and network event visibility.
• Debug complex kernel-mode and user-mode issues across multiple Windows versions.
• Translate threat intelligence into product features with researchers and product teams.
• Conduct code reviews, mentor engineers, and contribute to architectural decisions.
• Stay updated with Windows internals, security trends, and system programming best practices.

Requirements:

• Recent hands-on experience developing Windows kernel drivers (last 2+ years) using KMDF, WFP, minifilters, and ETW.
• 7+ years of C++ development experience (C++11 or later).
• In-depth knowledge of Windows internals, including kernel architecture, system calls, memory management, and drivers.
• Strong debugging and reverse engineering skills using tools like WinDbg, Process Monitor, IDA, or Ghidra.
• Familiarity with Windows security mechanisms, including integrity levels, UAC, AppLocker, and Secure Boot.
• Experience with Visual Studio, Windows Driver Kit (WDK), and related development environments.
• Nice-to-have: Rust, endpoint security product experience, Windows telemetry, Sysmon, ETW, malware analysis, SOC/DFIR workflows, scripting (PowerShell/Python), kernel-mode security evasion, code signing, and secure update mechanisms.
• Bachelor's degree in Computer Science, Software Engineering, or equivalent practical experience.