Airlock Digital is a global leader in application control and allowlisting. We seek to empower every organization to run only what they trust and operate free from malware and ransomware.
With rapid growth across Australia, North America, and EMEA. We are committed to our core values, respect, determination, and integrity. We support a diverse and expanding global customer base. At Airlock, we pride ourselves on being a team of humble, collaborative, and driven professionals who support one another and share a passion for cybersecurity.
What We are Looking For:
The Senior System Analyst is responsible for validating, troubleshooting, and improving the reliability of endpoint detection and protection components—primarily for Windows environments. This role involves deep technical analysis of agent behavior, crash and BSOD diagnostics, and memory dump interpretation. The analyst will collaborate closely with developers and support engineers to identify root causes of stability or detection issues, provide detailed technical insights, and verify resolutions.
The ideal candidate brings strong experience in Windows internals, debugging tools, and endpoint protection technologies, along with a working ability to interpret C++ code and map observed runtime issues to likely code-level faults.
Key Responsibilities:
- Perform in-depth analysis of endpoint agent crashes, BSODs, and performance issues across Windows platforms.
- Analyze memory dumps (user mode and kernel mode) to determine root cause and correlate findings to product code behavior.
- Utilize tools such as ProcDump, Process Monitor, WinDbg, Sysinternals Suite, Verifier and Windows Performance Analyzer to capture and interpret diagnostic data.
- Collaborate with development teams to validate code-level hypotheses based on dump analysis and system traces.
- Partner with Support and Product teams to reproduce complex customer-reported issues and deliver technical insight for resolution.
- Design, execute, and maintain test cases focused on endpoint detection agent reliability and detection accuracy.
- Document findings, provide detailed defect reports, and participate in root cause analysis (RCA) sessions.
- Contribute to continuous improvement of test practices and debugging frameworks across the endpoint detection product line.
- Strong experience testing and troubleshooting Windows endpoint security or detection applications.
- Deep understanding of Windows internals, process management, memory, drivers, and kernel interactions.
- Demonstrated proficiency with tools such as ProcDump, Process Monitor, WinDbg, and other debugging utilities.
- Proven ability to analyze crash dumps and interpret call stacks, exceptions, and symbols.
- Working knowledge of C++ code structure and debugging — able to map memory dump findings to code behavior.
- Familiarity with endpoint agent architecture, inter-process communication, and user/kernel space interactions.
- Excellent troubleshooting and analytical skills with attention to detail and logical reasoning.
- Ability to communicate technical findings clearly to both developers and support engineers.
- Experience testing or debugging Linux or macOS endpoint detection agents.
- Understanding of Linux fanotify, eBPF, and filesystem event monitoring.
- Familiarity with cross-platform endpoint detection frameworks.
- Exposure to CI/CD pipelines and test automation frameworks.
- Knowledge of malware detection, EDR, or behavioral monitoring concepts.
What We Offer:
We don’t think money is everything, but we know it is an important part of your decision to apply for a role. Additional factors considered in extending an offer include responsibilities of the job, education, location, experience, knowledge, skills, abilities, and internal equity, alignment with market data, or applicable laws.
Flexible Work Environment, Hybrid or Remote – Time Off - Paid Volunteering Time - Birthday Leave - Paid parental Leaves - Home Office Allowance
Our Commitment:We believe in supporting our team members both personally and professionally. Named one of the Australia’s Greatest Places to Work and 5th best technology company for 2025, we value flexibility, trust, and a work environment that empowers our team to do their best work.
We will be assessing applications as they come in, so we encourage you to send your resume through to us as soon as possible. All official job offers from our company are extended directly by our recruitment team and will be sent through an official BambooHR document for your review and signature. Please be aware that we do not ask for any personal information in the process of extending offers of employment, such as financial details. Upon acceptance of any offer, we will request such information as part of the onboarding process prior to or on your first day of employment, and only after completing a National Police Check through an authorized third-party vendor. If you receive any communication asking for personal details outside of these processes, please contact us immediately to verify the authenticity of the request. Your security is important to us, and we are committed to a safe and transparent hiring experience. No contact from recruitment agencies, thank you. #LI-SS1 #LI-Remote
Top Skills
What We Do
Airlock Digital is the global leader in application control and allowlisting, trusted by organizations worldwide to protect against ransomware, malware and other cyber threats. Our deny by default solution enables customers to run only the applications and files they trust, with all others blocked from executing. This approach minimizes attack surfaces and helps organizations align their cybersecurity strategies with government frameworks and standards.
Serving customers globally, Airlock Digital supports a broad spectrum of industries, including financial services, healthcare, manufacturing and government. We protect legacy systems and the latest versions of the Windows, macOS and Linux operating systems, enabling us to secure modern environments as well as older technologies. Our scalable, simple-to-implement solution forms a key pillar of cybersecurity strategies, delivering robust protection to organizations of all sizes.
