29 days ago
Pune, IndiaSenior
Responsibilities
- Own the health, backlog prioritization, technical direction, and efficacy of a detection coverage area.
- Design and implement complex detectors while establishing design patterns, coding standards, and implementation blueprints.
- Define validation, tuning, and maintainability criteria through design reviews, code reviews, and root-cause analysis.
- Track detection fidelity, ATT&CK coverage, false-positive and false-negative rates, and regression prevention.
- Convert threat intelligence, proactive threat hunting, and SOC analyst feedback into roadmap priorities and detection-engine improvements.
Requirements
- Foundational understanding of AI/ML technologies and experience leveraging, securing, or positioning AI-driven solutions within the functional domain.
- Deep detection experience in at least one of Endpoint/MDR, Cloud/SaaS, Identity, Email, or SIEM.
- Experience owning technical work end-to-end and being accountable for quality with limited oversight.
- Strong understanding of attacker behavior and fluent use of ATT&CK for detection coverage decisions.
- Experience with detector-as-code, version control, code review, and controlled deployment workflows using Git.
- Preferred: experience with AI-driven automation, LLMs, or machine learning models for detection engineering and threat analysis.
- Preferred: programming or scripting in Python, Go, Ruby, or similar languages for detection tooling and automation.
- Preferred: reverse engineering or deeper malware analysis experience.
Benefits
- Various health plans.
- Vacation and sick time off plans.
- Parental leave options.
- Retirement options.
- Education reimbursement.
- In-office perks.
- Hybrid work arrangement in Pune.
About Zscaler
Zscaler builds a cloud-delivered zero trust security platform that replaces traditional network security appliances for enterprises and public-sector organizations. Its Zero Trust Exchange provides secure web gateway, zero trust access, CASB, and cloud firewall services, sold as subscriptions and delivered across 160+ global data centers. Founded in 2007 and headquartered in San Jose, it is a public company on NASDAQ (ZS) serving thousands of customers worldwide.