← All roles

Windows Agent Developer

Cyble· Engineering
Apply on company site
Hybrid (Bengaluru, Karnataka)INR 4000k - INR 6000kFull-timePosted 10mo ago

About the role

Windows kernel-mode driver and EDR/XDR agent development role focusing on Windows internals, kernel-mode drivers, user-mode services, and real-time remediation within Cyble's EDR/XDR agent/sensor team.

Responsibilities

  • Work along with our senior lead kernel developers and work on design, develop, and maintain Windows kernel-mode drivers for various EDR/XDR modules.
  • Write Windows kernel-mode drivers for device management capabilities like USB, Bluetooth device controls.
  • Develop user-mode services that interface with kernel drivers for event processing and policy enforcement.
  • Implement real-time remediation actions like terminate, delete/quarantine, take & restore system snapshots.
  • Debug and resolve BSODs, race conditions, memory leaks, and performance bottlenecks.
  • Integrate with backend admin console with different integration methods and data exchange formats like JSON, Protobuf
  • Integrate with Threat Intelligence Systems and other downstream components.
  • Collaborate with cross-functional teams (security analysts, product managers, QA) to translate detection use cases into scalable agent capabilities.

Qualifications

  • Strong proficiency in C and C++, including multithreading and synchronization primitives.
  • Deep knowledge of Windows OS internals (kernel objects, memory management, I/O Manager, IRP lifecycle).
  • Experience in developing WDM, KMDF, or Minifilter drivers.
  • Strong understanding of Windows security architecture, process/thread management, file system architecture, and Registry internals.
  • Familiarity with monitoring frameworks
  • Hands-on experience implementing Kernel hooks and callback mechanisms, strong experience in writing user-mode code.
  • Experienced in writing components which does YARA rules lookups, experienced in ETW, Sysmon, kernel telemetry pipelines.
  • Written kernel / user-mode hooks for events like process, library, file system changes, registry changes, device hooks like USB, Bluetooth access controls.
  • Proficiency in building remediation components for various threats category.
  • Familiarity with debugging tools like WinDbg, Driver Verifier, Blue Screen analysis.
  • Understanding of endpoint security concepts, including EDR/XDR product behaviour.

Skills

Required:C/C++Windows kernel internalsKernel driver developmentSecurity concepts (EDR/XDR)
Nice to have:Debugging tools

Benefits

  • A dynamic and collaborative work environment.
  • Opportunities for learning and career growth.
  • Mentorship from experienced developers to guide you in advancing your skills.
Last updated Sep 23, 2026. Interested? Apply on the company site.
Cyble logo

About Cyble

Cyble - World’s First Intelligence-Driven, AI-Native Security…

To reimagine cybersecurity with an AI-native platform that unifies detection, protection and remediation across the digital attack surface Headquartered in Alpharetta, Georgia, and with offices in Australia, Malaysia, Singapore, Dubai, Saudi Arabia and India, Cyble has a global presence. To learn more about Cyble, visit www.cyble.com. 

saassecurityai
Company profileWebsite

More open roles at Cyble