Responsibilities
- Own the health, backlog prioritization, performance, technical direction, and overall efficacy of a detection coverage area.
- Solve complex detection challenges and establish design patterns, coding standards, and implementation blueprints.
- Define criteria for validated, tuned, and maintainable detection content through design reviews, code reviews, and root-cause analysis.
- Track detection fidelity, ATT&CK coverage, false-positive and false-negative rates, and regression prevention.
- Translate threat intelligence, proactive threat hunting, and SOC analyst feedback into roadmap priorities and engine improvements.
- Build and implement detector content using detector-as-code and controlled deployment practices.
Requirements
- Deep detection experience in at least one of Endpoint/MDR, Cloud/SaaS, Identity, Email, or SIEM.
- Foundational understanding of AI/ML technologies and experience leveraging, securing, or positioning AI-driven solutions within the functional domain.
- Demonstrated ownership of technical work from end to end with accountability for quality and limited oversight.
- Strong understanding of attacker behavior and fluent use of ATT&CK to guide detection coverage.
- Experience with detector-as-code, version control, code review, and controlled deployment using Git and CI/CD.
- Preferred: experience with AI-driven automation, LLMs, or machine learning models for detection engineering and threat analysis.
- Preferred: programming or scripting with Python, Go, Ruby, or similar languages to build detection tooling and automation.
- Preferred: reverse engineering or deeper malware analysis experience.
Benefits
- Various health plans.
- Vacation and sick time off plans.
- Parental leave options.
- Retirement options.
- Education reimbursement.
- In-office perks.
- Hybrid work arrangement in Pune.
About Zscaler
Zscaler (NASDAQ: ZS) is a pioneer and global leader in zero trust security. The world’s largest businesses, critical infrastructure organizations, and government agencies rely on Zscaler to secure users, branches, applications, data & devices, and to accelerate digital transformation initiatives. Distributed across 160+ data centers globally, the Zscaler Zero Trust Exchange™ platform combined with advanced AI combats billions of cyber threats and policy violations every day and unlocks productivity gains for modern enterprises by reducing costs and complexity. Stay Connected: LinkedIn: https://www.linkedin.com/company/zscaler Twitter: https://www.twitter.com/zscaler Facebook: https://www.facebook.com/Zscaler/ Instagram: https://www.instagram.com/zscalerinc/