2 days ago
Base Salary
$180k - $225k/yr
Responsibilities
- Monitor and evaluate agentic incidents and investigations, tracing issues across source alerts, data pipelines, and agent reasoning.
- Define telemetry and contextual requirements for analyst-grade investigations across detection surfaces.
- Research and onboard security vendor APIs and log schemas into a unified security data model.
- Architect telemetry normalization, multi-source correlation, and governance frameworks across vendor mappings.
- Design, implement, and benchmark incident rules and triage logic to reduce false positives and validate alert-grouping precision.
- Drive technical standards and roadmap deliverables from inception through production while partnering with AI engineers, platform architects, product managers, and research teams.
Requirements
- 10+ years of experience in security engineering, detection engineering, threat hunting, or threat research within an enterprise SOC, MDR provider, or security vendor.
- Experience working with, evaluating, or optimizing AI agents, large language models, or automated reasoning workflows for security operations or threat analysis.
- Expertise in enterprise security telemetry across endpoint, identity, cloud, and network environments, including Entra ID, Okta, Active Directory, AWS, Azure, and GCP audit logs.
- Advanced SQL or equivalent data-analysis proficiency for establishing baselines, performing impact analysis, and validating telemetry.
- Hands-on experience modifying schemas and data pipelines with Python and JSON, plus the ability to adopt proprietary query tools and APIs.
- Strong written and verbal communication skills for translating complex telemetry and AI behaviors into technical specifications.
- Preferred experience designing or evaluating multi-agent architectures, autonomous LLM reasoning frameworks, offensive security, red teaming, penetration testing, and open security data schemas such as OCSF, ECS, Google UDM, and Splunk CIM.
- Recognized technical authority capable of setting strategic standards and independently delivering complex technical work.
Benefits
- Remote position within the United States, with an in-office preference for Santa Clara, California.
- Full-time position with various health plans, vacation and sick time, parental leave, retirement options, education reimbursement, and in-office perks.
- Inclusive benefits and workplace accommodations are available for employees and their families.
About Zscaler
Zscaler builds a cloud-delivered zero trust security platform that replaces traditional network security appliances for enterprises and public-sector organizations. Its Zero Trust Exchange provides secure web gateway, zero trust access, CASB, and cloud firewall services, sold as subscriptions and delivered across 160+ global data centers. Founded in 2007 and headquartered in San Jose, it is a public company on NASDAQ (ZS) serving thousands of customers worldwide.