Windows Kernel Deep Diver (/developer)

Team descriptions 

The NortonLifeLock Labs team is made up of leading threat and security researchers supported by advanced systems to innovate security technology and threat intelligence to protect our customers against known and new threats. The main locations of the team are Chennai, India – Oslo, Norway – Dublin, Ireland and Culver City, USA. The Labs team is part of the CTO office. 

We overlook the portfolio of security technologies that makes for high detection without sacrificing system performance. The portfolio consists of modern and traditional components, like: 

• Network detection 
• Reputation and prevalence 
• Machine Learning 
• Cloud and Crowd detections 
• Behavioral analysis 
• Anti-virus engines and static scanners 

About the role

We are looking for a lead engineer for one or more of the areas mentioned above in the Microsoft Windows environment. This principal engineer should have profound low-level Windows experience. The role includes all aspects of software development including

• Get your hands dirty and work in the code
• Overlook the architecture
• Guide, train, and collaborate with senior developers on their way to success

Why this role is awesome

• Have an impact on world-wide cyber security by rolling out your features to millions of customers
• Insights into a wide range of security technologies
• Join a team with world-leading security experts
• Gain in-depth experience of the Windows OS and latest features through cooperation with Microsoft
• Insights into all major operating systems by cooperating with other platform teams
• Share experience within and across development teams
• Apply modern development practices to deliver latest protections to customers several times per day

Desired Skills

• 10+ years of experience in Windows development
• 10+ years of experience developing in both C and C++
• Experience in kernel mode driver development using WDF, WDM, or KMDF.
• Experience with Windows internals.
• Good understanding of x86/x64 assembly.
• Experience using tools like WinDbg and verifier, Visual studio, Git, etc.
• Excellent English skills

The following is a plus but not required

• Experience working in international workplace
• Reverse engineering experience
• Good Python skills
• Low level / system performance
• Experience with network technologies (HTTP / TCP/ IP, SSL / TLS)
• Cyber security experience from Network protect / detection perspective.
• Next generation firewalls (NGFW)
• Intrusion detection / prevention systems (IPS/IDS)
• Cyber security experience in endpoint security technology
• Antivirus
• On-access
• Network filter drivers
• HIPS / behavioral detection

Responsibilities

• Design, develop, test, document and maintain both kernel drivers and user mode services running on Windows endpoints.
• Follow best practices, secure coding, testing methodologies, effective peer code reviews, and robust architecture patterns.
• Use professional concepts in accordance with company objectives to solve complex problems in creative and effective ways.
• Provide guidance to other team members and peers without formal authority or supervisory responsibility
• Exercise judgment within broadly defined practices and policies in selecting methods, techniques and evaluation criteria for obtaining results
• Frequently contributes to the development of new theories and methods
• Employ expertise as a subject matter expert
• Works on complex problems where analysis of situations or data requires an in-depth evaluation of various factors

Experience 

• BS in computer science or equivalent related experience 
• 8+ years of experience in software companies/organizations 
• 10+ years of programming experience

None of this fit you? Reach out. We have more than 100 open roles.