Senior Windows Kernel/Internals Engineer (C++/C) IRC300924

Description

Our client is an endpoint security company looking for an expert-level Windows Kernel Driver Specialist to assist engineering team in developing next generation Endpoint Detection and Response (EDR) agent. We are looking for an experienced individual to join a team that is responsible for developing our cutting-edge collection, prevention and protection technologies using both documented and undocumented proprietary kernel mode techniques.

The team develops the core kernel technologies for a wide variety of products, from EDR to next-gen AV, including work that encompasses many aspects of kernel development, from infrastructure through filter drivers to function hooking, to name a few.

Requirements

Required Hard Skills (The “Must-Haves”)

• Expert C/C++: 3+ years of experience in strictly kernel-mode software development.
• WinDbg Mastery: Ability to perform “post-mortem” debugging without symbols for third-party conflicts, and live kernel debugging using VMWare/Hyper-V/KDNET. You must be comfortable analyzing stack traces, register states, and trap frames.
• Windows Internal Knowledge: Deep understanding of:
• IRQLs (Interrupt Request Levels) and DPC/Dispatcher mechanics.
• Memory Management (Paged vs. Non-Paged pool, MDLs).
• Synchronization primitives (Spinlocks, Mutexes, Pushlocks).
• File System Filters: Proven experience with the Filter Manager Model (FltMgr) and Minifilter drivers (FltRegisterFilter, Pre/Post operation callbacks).
• EDR/Security Driver Experience: Familiarity with:
• ObCallbacks (ObRegisterCallbacks).
• Process/Thread/Image Load Notify routines (PsSetCreateProcessNotifyRoutineEx, etc.).
• Avoiding deadlocks when injecting logic into high-frequency system paths.
  
  
  

Preferred Skills (The “Nice-to-Haves”)

• Reverse Engineering: Proficiency with IDA Pro or Ghidra to analyze potential conflicts with third-party drivers (e.g., Antivirus conflicts causing the crash).
• x64 Assembly: Ability to read disassembly to pinpoint the exact instruction causing the fault when source lines are ambiguous.
• WHQL/WHCP: Experience with the Windows Hardware Compatibility Program signing process (in case the fix requires re-certification) and Microsoft Virus Initiative program
  
  
  

Job responsibilities

Write kernel and Driver software that can reach the internals of the operating system.

• Implement novel collection and protection techniques.
• Write robust driver infrastructure.
• Optimize for extreme performance constraints.
• Research uncharted territories of the Windows kernel, drivers, APIs, and internal mechanisms.
• Crash Dump Analysis: Perform deep-dive analysis of kernel memory dumps (Minidumps and Complete Memory Dumps) to identify the root cause of the crash (e.g., race conditions, stack overflows, invalid memory access, IRQL violations).
• Reproduction & Isolation: Design stress tests and verification procedures to reliably reproduce the BSOD in a controlled environment using tools like Driver Verifier and specific load-testing scripts.
• Code Review & Remediation: Audit the existing C/C++ driver code (specifically Minifilter callbacks and process notification routines) for thread safety, proper lock usage (Spinlocks/ERESOURCE), and memory handling.
• Patch Implementation: Implement robust fixes for the identified issues, ensuring zero regression in driver performance or security efficacy.
• Validation: Verify fixes using Microsoft Driver Verifier and HLK (Hardware Lab Kit) basics to ensure stability under high stress.
  
  
  

What we offer

Empowering Projects: With 500+ clients spanning diverse industries and domains, we provide an exciting opportunity to contribute to groundbreaking projects that leverage cutting-edge technologies. As a team, we engineer digital products that positively impact people’s lives.

Empowering Growth: We foster a culture of continuous learning and professional development. Our dedication is to provide timely and comprehensive assistance for every consultant through our dedicated Learning & Development team, ensuring their continuous growth and success.

DE&I Matters: At GlobalLogic, we deeply value and embrace diversity. We are dedicated to providing equal opportunities for all individuals, fostering an inclusive and empowering work environment.

Career Development: Our corporate culture places a strong emphasis on career development, offering abundant opportunities for growth. Regular interactions with our teams ensure their engagement, motivation, and recognition. We empower our team members to pursue their career goals with confidence and enthusiasm.

Comprehensive Benefits: In addition to equitable compensation, we provide a comprehensive benefits package that prioritizes the overall well-being of our consultants. We genuinely care about their health and strive to create a positive work environment.

Flexible Opportunities: At GlobalLogic, we prioritize work-life balance by offering flexible opportunities tailored to your lifestyle. Explore relocation and rotation options for diverse cultural and professional experiences in different countries with our company.

About GlobalLogic

GlobalLogic, a Hitachi Group Company, is a trusted digital engineering partner to the world’s largest and most forward-thinking companies. Since 2000, we’ve been at the forefront of the digital revolution – helping create some of the most innovative and widely used digital products and experiences. Today we continue to collaborate with clients in transforming businesses and redefining industries through intelligent products, platforms, and services.