Jobs at ThreatLocker

Develop and maintain Windows kernel-mode filter drivers for file, process, registry, and network monitoring and enforcement within a Zero Trust cybersecurity platform. Responsibilities include investigating Windows internals, implementing bypass-resistant protections, debugging kernels and crash dumps, tuning performance, maintaining compatibility across Windows versions, and collaborating with user-mode, QA, DevOps, and security engineering teams.

Administers commercial and vendor contracts by drafting, reviewing, redlining, negotiating, and maintaining agreements. Supports legal documentation, compliance initiatives, data privacy matters, risk assessment, contracting processes, policy development, and regulatory research. The role also assists with corporate, employment, and trademark matters while ensuring accurate document archiving and legal conformity.

Drive customer acquisition through outbound prospecting and account penetration. Build and maintain sales pipeline using CRM tools, execute phone, email, and social campaigns, meet performance targets, identify MSP and MSSP prospects, and collaborate with sales and marketing leadership to refine messaging and target accounts.

Develop and maintain secure, scalable full-stack cybersecurity software. Responsibilities include guiding end-to-end technical implementations, collaborating with product and QA teams, writing tested and maintainable code, resolving defects and production issues, conducting code reviews, documenting features, and mentoring developers. The position requires expertise in .NET, REST APIs, SQL, JavaScript, HTML, CSS, and modern frontend frameworks. It is an in-office role based in Orlando, Florida.

Develop and maintain full-stack cloud security tools using C#, .NET, Microsoft Graph API, Microsoft 365, Entra ID, Purview, and Azure. Build REST APIs, integrate external cloud services, manage SQL databases, and develop front-end applications with modern JavaScript frameworks. Collaborate with product, QA, DevOps, and engineering teams to deliver secure, reliable, well-tested software, resolve defects, and improve tooling and processes. This is an in-office Orlando role with possible travel to company locations.

Conducts audits of sales proposals, CRM records, customer communications, and financial adjustments to verify accuracy, compliance, and data integrity. Analyzes trends and discrepancies, prepares audit reports, recommends corrective actions, and partners with Sales, Finance, and Operations to improve controls and workflows. The role also develops SOPs, monitors policy compliance, and supports quality assurance and continuous improvement initiatives.

Develops and maintains detection content for EDR and ITDR platforms. Creates Sigma, YARA, and Snort rules, maps detections to MITRE ATT&CK, analyzes Windows telemetry and forensic artifacts, researches attacker techniques, and validates detection logic through threat hunting, malware analysis, and adversary emulation. The role also tunes detections to reduce false positives, documents methodologies, and collaborates with threat analysts and security researchers.

Develop and maintain Windows kernel-mode filter drivers supporting endpoint security monitoring and enforcement. Build protections for file, process, registry, memory, and network activity; investigate Windows internals; perform kernel debugging, crash analysis, and performance tuning; and ensure driver compatibility across Windows versions. Collaborate with user-mode, QA, DevOps, security engineering, and threat research teams to deliver secure, stable cybersecurity capabilities.

Serve as a technical subject matter expert for cybersecurity solutions across the customer lifecycle. Analyze business and technical requirements, develop solution specifications, demonstrations, and proofs of concept, support implementation and post-sales activities, deliver product training, assist Sales, and represent the company at industry events.

Develop and maintain secure, scalable RESTful APIs using C#/.NET for a cybersecurity platform. Responsibilities include applying MVC and separation of concerns, implementing authentication and validation, integrating with SQL Server, troubleshooting performance and concurrency issues, and collaborating on testing, code reviews, documentation, and continuous improvement.

Investigate endpoint security alerts and cyber threats across client and internal environments. Analyze logs, classify suspicious activity, manage incident queues, conduct threat investigations, coordinate response actions, and communicate findings and remediation steps to customers. The role requires familiarity with SIEM systems, Windows, scripting, and the MITRE ATT&CK framework, and is performed in-office in Orlando with occasional travel possible.

Designs and executes software, system, device-driver, regression, performance, stress, and endurance tests. Develops Windows batch scripts and automation tools, analyzes system performance, troubleshoots failures, documents defects, and performs root-cause analysis. Collaborates with developers and systems engineers while maintaining QA documentation, test data, procedures, and automated scripts across Windows operating systems and hardware configurations.

Develop and optimize secure, high-performance Windows Services in C#/.NET for an endpoint protection platform. Responsibilities include working with Windows internals, file systems, network layers, privilege controls, intrusion prevention, concurrency, memory management, debugging, profiling, monitoring, and observability. Collaborate across teams, participate in code reviews, and maintain reliable, scalable service components aligned with security and compliance standards.

Develops new business across assigned international territories by prospecting target accounts, managing sales pipelines, building enterprise and channel-partner relationships, closing opportunities, meeting sales targets, maintaining CRM records, and providing market intelligence. The role is UAE-based and in-office, with frequent international travel for customer meetings, partner engagements, conferences, and events.

Develop, debug, test, and maintain low-level Linux kernel components for endpoint security and threat prevention. Work with kernel modules, eBPF, system calls, filesystems, networking, memory management, and process monitoring across multiple distributions, architectures, and kernel versions. Address complex system and performance issues, support platform porting, and contribute to packaging, CI/CD, and automated testing while collaborating with engineering, QA, DevOps, and security teams.

Supports accounts payable and company financial records by reviewing and processing invoices, managing vendor accounts, coordinating payment schedules, routing general ledger entries, maintaining financial documentation, monitoring balances and expenses, preparing monthly reports, processing 1099 and W-9 documentation, and handling bank deposits and collections. The role is in-office in Orlando and may require occasional travel, background screening, and randomized drug testing.

Assists with automating deployments, CI/CD pipelines, infrastructure management, monitoring, configuration management, containerization, and security practices. Maintains onsite virtualized infrastructure using Docker and Hyper-V, troubleshoots system issues, supports cloud and infrastructure-as-code initiatives, collaborates with development teams, and documents technical processes. This is an in-office Orlando role with possible travel to company locations.

Develop and maintain secure, scalable mobile applications using React Native. Collaborate with product, QA, and engineering teams to deliver reliable features, optimize performance, resolve production issues, conduct code reviews, document implementations, and mentor developers while applying cybersecurity and Zero Trust principles.

Conduct manual and automated security-focused code reviews across multiple languages and codebases. Identify vulnerabilities, recommend remediation, guide developers on secure coding, and ensure alignment with OWASP, CWE, NIST, and other standards. Collaborate with security and DevSecOps teams, document findings, track remediation, support audits and threat modeling, and deliver secure coding training. This is an onsite Orlando role requiring five or more years of software development experience, including application security or secure code review.

Develops long-form cybersecurity content, including case studies, blogs, white papers, guides, and thought leadership. Translates technical concepts into clear, benefit-focused messaging for technical and business audiences. Creates persuasive campaign copy, headlines, calls to action, and brand messaging while collaborating with product teams, technical experts, and leadership. Edits content for clarity, tone, and impact and aligns communications with the company’s Zero Trust positioning and marketing goals.