Windows Kernel & Vulnerability Research Engineer

The Josef Group

  • Chantilly, Virginia
  • 30+ days ago

    Highlights

    Conduct in-depth research into Windows internals , including system architecture, memory management, drivers, processes, and kernel-mode operations. Strong understanding of Windows operating system internals , including kernel architecture, drivers, APIs, memory layout, and subsystem behavior.

    Numbers & Facts

    LocationChantilly, Virginia

    Description

    Windows Kernel & Vulnerability Research Engineer
    Chantilly, VA
    TS/SCI to start 

    Key Responsibilities

    • Conduct in-depth research into Windows internals, including system architecture, memory management, drivers, processes, and kernel-mode operations.

    • Perform reverse engineering of Windows binaries, drivers, and firmware using industry-standard tools.

    • Identify, analyze, and document zero-day vulnerabilities and security weaknesses across kernel and user-mode components.

    • Develop proof-of-concept (PoC) code to demonstrate impact and exploitability of discovered vulnerabilities.

    • Collaborate with engineering teams to design mitigations, security patches, and hardening strategies.

    • Analyze exploit techniques, malware samples, and emerging threat vectors affecting Windows platforms.

    • Contribute to internal knowledge bases, tooling, and automation that streamline research workflows.

    Required Qualifications

    • Strong understanding of Windows operating system internals, including kernel architecture, drivers, APIs, memory layout, and subsystem behavior.

    • Proficiency in C/C++, with experience writing or analyzing kernel-mode code and Windows drivers.

    • Expertise in reverse engineering tools such as IDA Pro, Ghidra, WinDbg, x64dbg, or Binary Ninja.

    • Solid grasp of assembly language (x86/x64) and low-level debugging.

    • Experience conducting vulnerability research or exploit development in Windows environments.

    • Familiarity with common exploit mitigation techniques (ASLR, DEP, CFG, SMEP/SMAP, etc.).

    Preferred Qualifications

    • Prior experience discovering and responsibly disclosing security vulnerabilities.

    • Knowledge of kernel exploitation techniques, sandbox escapes, or privilege escalation attacks.

    • Understanding of malware analysis, rootkits, or advanced persistent threats.

    • Contributions to open-source security tools or research publications.

    • Experience with scripting languages (Python, PowerShell) for automation.

    Who You Are

    • Curious, analytical, and passionate about low-level technologies.

    • Comfortable diving into undocumented features and complex system behavior.

    • Able to work independently while collaborating effectively across teams.

    Similar Jobs

    See more jobs