Windows Kernel Developer – Malware Sandbox Developer

Versa Networks, Inc. is a leading vendor of next-generation Software Defined solutions and architectures, including SD-WAN, SD-LAN, SASE (Secure Access Service Edge), and NGFW. Versa is providing an end-to-end solution that both simplifies and secures every network edge, be it on LAN, WAN, or Cloud network.

 

·      Full software-defined branch for enterprise customers.

·      Secure SD-WAN and SD-LAN for enterprises with layered security.

·      Next-generation managed services for service providers.

Experience Level: at least 5 years recent experience in developing security solutions like Endpoint Detection and Response Engines, Anti-Virus Engines, Endpoint Monitoring Solutions for Windows

We are looking for a highly skilled Windows Kernel Developer to join our engineering team. In this role, you will be responsible for building and maintaining low-level components for Windows based driver that collects events to detect and classify malware. Your work will focus on kernel-mode drivers, hooking/monitoring mechanisms, and interacting with core Windows internals.

This role is ideally suited for someone with a strong background in Windows system internals, kernel development, and low-level debugging, especially if you have prior experience working on security products like EDRs or antivirus engines.

·      Design and develop Windows kernel-mode drivers for endpoint security solutions.

·      Implement low-level monitoring of process/thread/file/registry/network activity.

·      Build hooks and filters using Windows filtering platforms (e.g., MiniFilter, WFP, ETW, etc.).

·      Work closely with the threat research team to support detection logic in userland and kernel space.

·      Maintain high performance and stability in sensitive environments.

·      Perform kernel-level debugging (WinDbg, KD) and crash dump analysis (BSODs).

·      Implement techniques for self-defense, anti-tampering, and secure communication between kernel and user space.

·      5+ years of hands-on experience with Windows kernel programming.

·      Solid grasp of Windows internals, including memory management, process/thread lifecycle, handle tables, IRPs, APCs, and DPCs.

·      Proficiency in C/C++, especially for system-level development.

·      Experience with kernel debuggers (WinDbg, KD) and crash dump analysis.

·       Familiarity with MiniFilter drivers, WFP, Kernel Callbacks as used in security products

·       Understanding of driver signing, code integrity, and patch guard (KMCI/PG).

·       Ability to write efficient, secure, and reliable code in performance-sensitive environments.

·      Strong debugging, reverse engineering skills.

·       Prior experience in developing security products like EDR, AV engines, HIDS, or DFIR tools.

·      Understanding of malware techniques, rootkits, code injection, and anti-analysis mechanisms.

·      Familiarity with user-mode and kernel-mode communication (IOCTLs, ALPC, shared memory).

·       Experience building self-defense and anti-tampering mechanisms in security products.

·       Understanding of virtualization-based security (VBS), Hyper-V, Control Flow Guard (CFG), etc.

·       Experience working with cloud-integrated endpoint platforms or telemetry pipelines.

·      Become the go-to application and infrastructure security expert within the dev team.

·      Work on high-impact products using cutting-edge cloud and container technologies.

·      Influence design, architecture, and delivery with a security-first approach.

 

Look forward to talk you.

Versa Networks is a rapidly growing organization and is built by people with vast experience in networking industry. We are a pragmatic team with a healthy work-life balance. We offer competitive compensation packages and quality of life benefit to everyone in an inspiring environment with skilled and passionate coworkers. Our exciting company culture offers a great place to work.