Principal Software Engineer - Windows EDR

About ThreatDown ThreatDown, the corporate business unit of Malwarebytes, is redefining cybersecurity for growing businesses with solutions that stop ransomware, malware, phishing, and AI-powered attacks. Our platform is trusted, intuitive, and built for lean IT teams that need speed without complexity. At ThreatDown, you’ll join a team driven by innovation, resilience, and a passion for empowering businesses to thrive securely. If you're ready to make a real impact in cybersecurity, we’d love to meet you. ThreatDown is looking for.. ThreatDown is looking for a Windows EDR Development Engineer to help build the next generation of endpoint detection and response capabilities for enterprise environments. This role may be a great fit if you enjoy working close to the operating system, solving complex systems-level problems, and building security products that operate reliably at scale. You will contribute to user-mode and kernel-mode components that support endpoint telemetry, threat detection, prevention, self-protection, and remediation. You will collaborate with detection engineers, security researchers, and platform teams to deliver high-performance, resilient, and secure endpoint technologies that help protect customers from modern threats. We encourage candidates from a wide range of backgrounds to apply, even if they do not meet every qualification listed below. If your experience gives you the ability to contribute to this work, we would like to hear from you. What You Will Do: Design, develop, and maintain Windows endpoint sensor components in C++ and C#. Build and enhance telemetry collection, detection, prevention, and response capabilities for EDR products. Develop software that operates across both user-mode and kernel-mode environments. Design and maintain Windows drivers, system services, and other low-level platform components. Implement new endpoint protection capabilities and continuously improve existing detection technologies. Debug and resolve complex issues involving Windows internals, kernel interactions, memory management, and system performance. Partner with detection engineers and security researchers to translate threat intelligence into product capabilities. Optimize endpoint performance, stability, and resource utilization across large-scale deployments. Participate in architecture reviews, code reviews, and engineering design discussions. Contribute to engineering best practices, quality initiatives, and continuous improvement across the team. Skills You'll Need to Have: Bachelor’s or Master’s degree in Computer Science, Computer Engineering, Cybersecurity, a related field, or equivalent practical experience. Professional software development experience on Microsoft Windows; experience with systems-level or endpoint software is especially helpful. Proficiency in C++ and familiarity with C#, or the ability to ramp up quickly in C#. Solid understanding of Windows internals, operating system architecture, or system-level programming concepts. Experience developing software with Windows APIs and native operating system services. Experience with Windows driver development, kernel-mode programming, or closely related low-level Windows technologies. Debugging and troubleshooting experience using WinDbg or comparable diagnostic tools. Experience contributing to production-grade software or services used by customers or internal teams. Understanding of secure software development practices and an interest in building reliable, trustworthy systems. Strong analytical and problem-solving skills, with the ability to communicate technical ideas clearly with teammates and partners. Ability to communicate effectively in written and spoken English in a collaborative engineering environment. Perks & Benefits: Comprehensive medical, dental, and vision insurance coverage Employee Referral Bonus Program Wellness programs Comprehensive Time Off policy An opportunity to do something great for yourself and the world! (Benefits and Perks subject to change by country/region)