Role Overview:
We are seeking a skilled Windows OS / Desktop Security Developer to design, implement, and maintain security solutions for Windows-based environments. The ideal candidate will have deep expertise in Windows internals, secure coding practices, and endpoint protection technologies to safeguard enterprise systems against evolving threats.
Key Responsibilities:
- Develop and maintain security features for Windows desktop applications and operating system components.
- Implement secure coding practices to prevent vulnerabilities such as buffer overflows, privilege escalation, and code injection.
- Design and integrate endpoint security solutions (e.g., antivirus, EDR, encryption, application whitelisting).
- Analyze and harden Windows OS configurations to meet compliance and security standards.
- Perform vulnerability assessments and penetration testing on Windows-based systems.
- Collaborate with cross-functional teams to ensure security requirements are embedded in product design.
- Monitor and respond to security incidents related to Windows endpoints.
- Stay updated on emerging threats, exploits, and Microsoft security patches.
Required Skills & Qualifications:
- Strong proficiency in C/C++, C#, and Windows API programming.
- In-depth knowledge of Windows internals (kernel, registry, services, drivers).
- Experience with Windows security architecture (UAC, ACLs, Group Policy, BitLocker).
- Familiarity with Active Directory, Kerberos, and enterprise authentication mechanisms.
- Hands-on experience with endpoint security tools and malware analysis.
- Understanding of secure software development lifecycle (SDLC).
- Knowledge of network security protocols (TLS, IPsec) and Windows firewall configuration.
- Bachelor's degree in Computer Science, Cybersecurity, or related field (or equivalent experience).
Preferred Qualifications:
- Experience with reverse engineering and debugging tools (WinDbg, IDA Pro).
- Certifications such as Microsoft Certified: Security, Compliance, and Identity Fundamentals, OSCP, or CISSP.
- Familiarity with PowerShell scripting for automation and security hardening.
- Exposure to cloud-integrated Windows security (Azure AD, Intune).
Soft Skills:
- Strong problem-solving and analytical skills.
- Ability to work independently and in a team environment.
- Excellent communication and documentation skills.
