Staff Software Development Engineer - Windows Endpoint

3 months ago
Full-time
Lead
Software Development
BeyondTrust

BeyondTrust

BeyondTrust is a global cyber security company specializing in identity and access security solutions, trusted by over 4,000 customers worldwide.

Professional Services
1K-5K
Founded 1985
$49M raised

Description

  • Design, build, and own kernel-mode enforcement drivers for file systems, process and thread creation, handle operations, and registry access.
  • Build and maintain the user-space agent that installs and drives kernel enforcement.
  • Own the kernel/user-mode enforcement boundary, including event capture, policy evaluation, and inline deny decisions.
  • Optimize enforcement latency on the hot path across large fleets, including caching, enrichment, eviction, and process ancestry resolution.
  • Extend enforcement into Windows containers, Host Compute Service workloads, silos, job objects, and container identity handling.
  • Harden portability and stability across Windows versions, including handling structure-versioning, PatchGuard, Driver Verifier, HVCI, and WHQL signing constraints.
  • Partner with Linux, macOS, and policy-backend engineers on shared policy semantics, event schemas, and the common Rust agent.
  • Represent Windows in cross-functional and cross-org architecture reviews and explain technical tradeoffs to stakeholders.
  • Mentor senior and mid-level engineers on Windows systems and kernel-driver development.
  • Drive end-to-end ownership from design through production for security-critical kernel code.

Requirements

  • 8+ years of systems-level software engineering experience with deep Windows kernel development.
  • Deep knowledge of Windows kernel internals, including the I/O manager, IRP flow, object manager, process and thread structures, memory management, and Windows security concepts such as tokens, SIDs, and ACLs.
  • Production kernel-mode driver development experience in C, C++, or Rust.
  • Hands-on experience shipping a file-system minifilter or comparable callback-based driver.
  • Strong understanding of IRQL, synchronization, safe user-buffer access, and kernel reentrancy.
  • Experience with driver signing and deployment, including WHQL attestation, EV code signing, and the WDK/WDDF/KMDF ecosystem.
  • Knowledge of Windows isolation models such as job objects, silos, Windows containers, and AppContainer.
  • Experience with kernel debugging and performance tooling such as WinDbg, KD, ETW, Driver Verifier, and crash-dump analysis.
  • Demonstrated use of AI-first development tools such as Claude Code or similar as part of the daily workflow.
  • Full-lifecycle product release experience in an agile environment.
  • Track record of technical leadership on complex, ambiguous initiatives that span teams.
  • Working grasp of systems design patterns and tradeoffs at the kernel/user-mode boundary.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Principal Software Engineer

AssureSoft 51-250 Internet Software & Services

AssureSoft is seeking a senior software development technical leader to guide architecture, build web applications, mentor engineering teams, and lead quality and AI adoption for client projects.

CI/CD Docker Git JavaScript PHP Python REST API Vue.js
3 hours, 26 minutes ago

Staff Software Engineer, Planner

DoorDash 10K-50K Air Freight & Logistics

DoorDash Labs is hiring a Senior Planner Engineer to develop and deploy robust motion-planning and trajectory-optimization systems for autonomous last-mile delivery in dynamic urban and suburban environments.

C++
3 hours, 26 minutes ago

Staff Software Engineer

EQL Tech Internet Software & Services

Planoly is seeking a hands-on Staff Software Engineer to lead a product squad and build the shared platform foundations powering its creator-focused social content platform.

Expo GraphQL Next.js Node.js Playwright PostgreSQL React React Native System Design Tailwind CSS TypeScript Vercel
3 hours, 26 minutes ago

Software Engineer AFRL

Whitespace 11-50 Professional Services

GeoDelphi, Inc. is seeking a Software Engineer to customize the Worldline synthetic population simulation platform for an AFRL research and development project supporting national security applications.

Agile Apache Spark AWS Azure CI/CD Confluence GCP GitLab Hadoop Java Jenkins JIRA Python SQL
3 hours, 26 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers