Sr. Principal Software Engineer: Windows Sensors - Secureworks - Columbia, MD; Raleigh, NC; OR US Remote
Columbia, MarylandJob ID R023898 Date posted Jul. 22, 2019
Sr. Principal Software Engineer: Windows Sensors
Location: Columbia, MD; Raleigh, NC; Austin, TX; Atlanta, GA; or US Remote
Secureworks® (NASDAQ: SCWX) is a technology-driven cybersecurity leader that protects organizations in the digitally connected world. Built on proprietary technologies and world-class threat intelligence, our applications and solutions help prevent, detect, and respond to cyber threats. Red Cloak™ software brings advanced threat analytics to thousands of customers, and the Secureworks Counter Threat Platform™ processes over 300B threat events per day. We understand complex security environments and are passionate about simplifying security with Defense in Concert™ so that security becomes a business enabler. More than 4,000 customers across over 50 countries are protected by Secureworks, benefit from our network effect and are Collectively Smarter. Exponentially Safer.™ www.secureworks.com
We enjoy competitive compensation and benefits packages, and reward and recognize our employees for exceptional results. A constant focus on continued learning and growth keeps our team members engaged and excited about “what’s next.” We offer flexible work options when available, and emphasize the importance of work-life balance. We know that when our people are rewarded, recognized, and rejuvenated, we win as a team.
Our Red Cloak sensor team is looking for a principal software engineer with deep knowledge of Windows internals to drive the next-generation endpoint capabilities of our new product offerings, which you can explore here. You will work in a fast-paced, startup-like environment with an experienced, cross-functional team of software engineers, data scientists, and security experts to develop our next generation endpoint sensor that seamlessly integrates with our cloud-native security analytics platform. If you love computer security and digging into complex engineering challenges, then we want your help securing human progress!
The ideal candidate will have a computer science background with an emphasis on operating systems and computer security. Your focus will be on the Windows agent, but many features cut across OS subsystems such as collecting telemetry from processes, networking, and file systems. Your code will be used in a lean agent that delivers security by building on proven, pre-existing mechanisms inside Windows in order to minimize its footprint. The agent has shared components across multiple platforms, so experience with *nix system-level development is a strong plus. With a background in kernel and driver development, we expect most will have extensive experience with C/C++, but experience or interest with Golang is a strong plus and will be heavily utilized.
Own feature development for our Windows sensor from design to delivery with high concurrency and reliability requirements and low/no impact to end users.
Provide technical leadership on the architecture, strategy, and development of next generation threat detection and response capabilities.
Design and implement software with cross platform deliverables (Windows, macOS, Linux).
Recommend and develop new product concepts and capabilities.
Triage, reproduce, debug, and fix issues identified in the product.
Secure deployed code, update processes, and communication paths against potential attackers that aim to hijack highly privileged applications.
Build tools to support team efficiency and contribute to test automation.
Lead projects efficiently while maximizing performance and minimizing costs.
Ensure high standards are being followed when it comes to design, coding quality, along with unit and component testing.
Work effectively on a geographically distributed team to deliver high quality software against aggressive schedules.
B.S./M.S. in Computer Science or equivalent experience.
7+ years of experience in software development for enterprise-class applications.
Extensive experience with low-level systems programming for Windows using Golang or C/C++.
User mode or kernel mode device driver development experience using WDF, WDM, UMDF, or KMDF.
Experience debugging with WinDbg.
Experience with MSI technology or other installation software.
Knowledge of hooking and filtering.
Deep understanding of networking concepts.
Working knowledge of Linux.
Flexibility to contribute to different components of the endpoint product, such as system services, instrumentation, installers and, occasionally, user-interface.
Keen sense of urgency and the ability to prioritize problems, analyze, and resolve issues.
Ability to lead, mentor, communicate, collaborate, and work effectively in a distributed team.
Excellent oral and written communication skills.
Experience with Windows CI/CD including installers, updaters, packaging, and signing.
Strong engineering and development skills in C/C++, Go, and Python.
Good understanding of x86/amd64 assembly.
Knowledge of malware analysis, vulnerability research, and exploit development.
Experience with product security areas including encryption, authentication, and other defensive techniques.
Familiarity with data science techniques or machine learning.
Familiarity with large scale data analysis pipelines, particularly the impact endpoint sensors have on downstream architecture and applications.
Prior experience working on geographically distributed teams in an entrepreneurial environment.
Secureworks (A Dell Technologies Company) is committed to the principle of equal employment opportunity for all employees and to providing employees with a work environment free of discrimination and harassment. All employment decisions at Secureworks are based on business needs, job requirements and individual qualifications, without regard to race, color, religion or belief, national, social or ethnic origin, sex (including pregnancy), age, physical, mental or sensory disability, HIV status, sexual orientation, gender identity and/or expression, marital, civil union or domestic partnership status, past or present military service, family medical history or genetic information, family or parental status, or any other status protected by the laws or regulations in the locations where we operate. Secureworks will not tolerate discrimination or harassment based on any of these characteristics. Learn more about Diversity and Inclusion at Secureworks here.