As a Windows Security Engineer at our company, you will be part of the advanced offensive security research team. Your primary responsibilities will include conducting offensive security research, analyzing Windows vulnerabilities, developing proof-of-concept exploits, and assessing and improving the resilience of enterprise Windows environments. Here is a detailed overview of what you can expect in this role:
**Role Overview:**
As a Windows Security Engineer, you will focus on adversary simulation, Windows kernel attack surface research, and offensive tooling development to enhance the security posture of enterprise Windows environments. **Key Responsibilities:**
Research historical and emerging Windows vulnerabilities, conduct CVE analysis, and assess exploitability. - Analyze Windows kernel attack surfaces, including system calls, drivers, object manager, and memory manager. - Develop proof-of-concept exploits for Windows kernel and privileged components in a controlled research environment. - Build low-level tooling in C/C++ for privilege escalation, kernel callback abuse, and token manipulation. - Research and simulate EDR/AV evasion techniques and bypass modern Windows exploit mitigations such as DEP, ASLR, CFG, and KASLR. - Simulate advanced persistent threat (APT) techniques targeting Windows environments, conduct privilege escalation, and post-exploitation research. - Document vulnerabilities, exploitation paths, and attack methodologies clearly and produce technical reports for internal stakeholders and leadership. **Qualifications Required:**
Bachelors degree in Computer Science, Cybersecurity, or related field. - Equivalent hands-on offensive security experience will be considered. - Strong understanding of Windows architecture, including Windows kernel architecture, process, thread, and token internals, virtual memory management, and System Service Descriptor Table (SSDT) concepts. - Proficiency in C and C++ (kernel-mode and user-mode), experience developing Windows drivers and low-level tools, familiarity with inline assembly, and reverse engineering concepts. - Experience with Windows vulnerability research, exploit development, privilege escalation techniques, and kernel exploitation fundamentals. - Familiarity with offensive and analysis tools such as Debuggers (WinDbg, x64Dbg, GDB), IDA Pro/Ghidra, Sysinternals Suite, Process Monitor/Process Explorer, and custom exploit frameworks and fuzzers. - Certifications such as OSCP, OSEP, OSED, CRTO, or equivalent offensive certifications are preferred. Any advanced Windows or red team-focused certifications are a plus. Join our team if you have a deep expertise in Windows internals, strong C/C++ development skills, and hands-on experience in offensive security research. As a Windows Security Engineer at our company, you will be part of the advanced offensive security research team. Your primary responsibilities will include conducting offensive security research, analyzing Windows vulnerabilities, developing proof-of-concept exploits, and assessing and improving the resilience of enterprise Windows environments. Here is a detailed overview of what you can expect in this role:
**Role Overview:**
As a Windows Security Engineer, you will focus on adversary simulation, Windows kernel attack surface research, and offensive tooling development to enhance the security posture of enterprise Windows environments. **Key Responsibilities:**
Research historical and emerging Windows vulnerabilities, conduct CVE analysis, and assess exploitability. - Analyze Windows kernel attack surfaces, including system calls, drivers, object manager, and memory manager. - Develop proof-of-concept exploits for Windows kernel and privileged components in a controlled research environment. - Build low-level tooling in C/C++ for privilege escalation, kernel callback abuse, and token manipulation. - Research and simulate EDR/AV evasion techniques and bypass modern Windows exploit mitigations such as DEP, ASLR, CFG, and KASLR. - Simulate advanced persistent threat (APT) techniques targeting Windows environments, conduct privilege escalation, and post-exploitation research. - Document vulnerabilities, exploitation paths, and attack methodologies clearly and produce technical reports for internal stakeholders and leadership. **Qualifications Required:**
Bachelors degree in Computer Science, Cybersecurity, or related field. - Equivalent hands-on offensive security experience will be considered. - Strong understanding of Windows architecture, including Windows kernel architecture, process, thread, and token internals, virtual memory management, and System Service Descriptor Table (SSDT) concepts. - Proficiency in C and C++ (kernel-mode and user-mode), experience developing Windows drivers and low-level tools, familiarity with inline assembly, and reverse engineering concepts. - Experience with Windows vulnerability research, exploit development, privilege escalation te