Stop applying to remote jobs that are already dead.
Every listing shows the evidence: when we last checked it, how, and when it was posted and closed.

All listings

Hire Hangar via Ashby

Windows Endpoint Security Developer

IndiaEgyptSouth Africa $3,000–4,000/mo Level not stated
still open verified 1d ago posted 18d ago seen 4h ago
Apply at jobs.ashbyhq.com

This is the employer's own posting, not a copy on a job board.

What we know

Is it still open?

Confirmed still open

Last checked 1d ago — checked against the employer's own applicant tracking system, which is the company answering directly.

We re-read the employer's own applicant tracking system and the posting was still there. That is the company answering directly.

Check this listing's status as JSON

How old is it?

Posted 18d ago

The date the source published, not the day we noticed it (2026-10-14). Last seen at its source 4h ago.

We have tracked this listing since 14 Oct 2026 (18 days). The employer's own board has carried it every time we have read it, most recently 4 hours ago.

Is it remote?

Marked remote on the employer's board

Their board carries a remote setting on this posting — a field they filled in, not wording we read. The location field names somewhere specific, which is usually where the team or the entity sits.

Who may apply?

India, Egypt, South Africa

The description states no restriction of its own. This is the source's own tag.

Pay

$3,000–4,000/mo

Published by the source in its own salary field. Shown in the posting's own currency and period; we never convert.

Skills named in the ad

Application SecurityAsanaC++Endpoint SecurityGoogle WorkspaceThreat ModelingTroubleshooting

Recognised terms only, from a fixed vocabulary — this is what CV matching compares against.

Carried by 1 source

The listing

Join Hire Hangar and work with fast-growing global companies while building a long-term career.

Job Title: Windows Endpoint Security Developer (C/C++ & Driver Development)
Location | Remote
Time Zone | US Time Zones (EST–PST)

Role Overview:

We are seeking a Windows Endpoint Security Developer with strong C, C++, and Windows driver development skills to help build an AI-focused endpoint protection platform. This is a full-time, hands-on engineering role. Your first focus will be building a Windows service that collects system, network, and process data to detect and respond to threats. The ideal candidate knows Windows internals well and enjoys building fast, reliable security software.

Key Responsibilities:

  • Design and implement Windows endpoint services, including kernel-mode and user-mode modules

  • Develop Windows drivers (WDM, KMDF, UMDF) to monitor file system, process, memory, and network activity

  • Build features that drive efficient data collection focused on AI behavioral monitoring

  • Implement secure hooks and filters using Windows Filtering Platform (WFP), minifilters, and ETW

  • Collaborate with the team on threat research strategies and translate them into detection logic using endpoint telemetry

  • Perform advanced debugging and troubleshooting across kernel and user mode using WinDbg, crash dump analysis, and Sysinternals tools

  • Ensure compliance with Microsoft driver signing, PatchGuard, Secure Boot, and kernel security restrictions

  • Optimize agent performance to minimize system impact while maintaining visibility and protection

  • Participate in threat modeling, secure coding reviews, and internal security assessments

Required Qualifications:

  • Experience working on Windows endpoint security products such as AV, EDR, DLP, firewall, or intrusion prevention (non-negotiable)

  • Deep expertise in C, C++, and Windows driver development

  • Strong understanding of Windows OS fundamentals and internals

  • Experience with kernel-mode communication mechanisms (IOCTL, ALPC, shared memory)

  • Proficiency with WinDbg, crash dump analysis, and Sysinternals tools

  • Knowledge of Windows Filtering Platform (WFP), minifilters, and ETW

  • Understanding of Microsoft driver signing, PatchGuard, and Secure Boot

  • Experience with threat modeling and secure coding practices

  • Strong written and spoken English with a clear, professional communication style

  • Must have prior remote work experience, be fluent with remote collaboration tools and platforms (such as Slack, Zoom, Google Workspace, Asana, or similar), and have ideally worked with US or UK-based companies. Applications without this experience will not be considered.

Preferred Qualifications:

  • Familiarity with cross-platform endpoint security (macOS/Linux)

  • Experience building telemetry or behavioral analytics pipelines for threat detection

  • Exposure to AI/ML-driven security products or monitoring AI agent activity

Tools & Technology:

  • C and C++

  • Windows Driver Frameworks (WDM, KMDF, UMDF)

  • Windows Filtering Platform (WFP), minifilters, and ETW

  • WinDbg and Sysinternals tools

  • Slack, Zoom, and other remote collaboration tools

Please NOTE:

It is crucial that you complete the application form in full. As part of the application process, you will be required to record a video. If your application is successful, you will receive an email confirming next steps—the video is the first step of the interview process. If you do not record a video, we will not be able to consider you for ANY open roles.

We connect top talent with vetted employers, competitive pay, and real growth opportunities.

Apply at jobs.ashbyhq.com