Windows sensor developer (Low Level developer)

Windows Sensor Developer

We’re Miggo — a cybersecurity startup on a mission to stop app-layer breaches before they happen. Founded in 2023 and backed by top tier cyber VCs, we’re building the world’s first Application Detection & Response (ADR) platform. Why? Because 80% of cyber attacks target the app layer, and current tools just don’t cut it. Miggo brings visibility into how apps actually behave at runtime, spotting risky flows and shutting down threats in real time. If you’re excited to shape the future of app security from the inside out — join us.

At Miggo, We Live By Four Core Principles

We make it customer-focused, putting user needs at the heart of everything we build. We make it happen, driven by a can-do mindset and an obsession with winning. We make it better, always pushing boundaries, learning new things and owning our impact. And most importantly, we make it together — one team, working hard, laughing harder, and thriving on diverse perspectives.

What you’ll do

Miggo is looking for a Windows Sensor Developer to take our runtime application security sensor beyond Linux and Kubernetes and onto Windows servers. This is a ground-floor role: you’ll own the design and build of a production-grade agent that gives deep visibility into how applications actually run. That means knowing what’s installed, proving what’s loaded and executed down to the function level, and detecting and blocking attacks in real time. You’ll work closely with our sensor, research and product teams to ship something customers can trust on their most critical workloads.

In This Role, You Will

• Own the architecture of Miggo’s Windows sensor, from the first design doc to production deployment.
• Make the hard calls on instrumentation approaches, including ETW, kernel and user-mode hooks, and .NET/CLR profiling.
• Build visibility into installed software, loaded modules and function-level execution of running applications.
• Develop real-time detection and blocking capabilities that stop attacks without disrupting the workload.
• Keep the sensor safe, stable and low-overhead, so it’s invisible in production.
• Work with research and product teams to turn new threats and customer needs into sensor capabilities.
  
  

• Get excited about low-level systems code that has to be both safe and fast.
• Love digging into Windows internals to understand how things really work under the hood.
• Enjoy owning a component end to end and making architectural decisions with long-term impact.
• Care deeply about stability and performance, because you know customers run this on their most critical servers.
• Thrive in ambiguity and like building something new from the ground up.
• Collaborate well across teams and can explain deep technical trade-offs clearly.
  
  

• 5+ years of experience developing Windows systems software in C/C++.
• Deep knowledge of Windows internals: processes, threads, memory, the loader, services and the driver model.
• Hands-on experience with ETW, API hooking or kernel-mode drivers.
• Experience building and shipping endpoint agents, EDR sensors or similar production-grade security software.
• Experience with .NET/CLR profiling APIs or managed runtime instrumentation is a strong advantage.
• Background in application security or runtime protection is a plus.