12 hours ago
Bengaluru, IndiaStaff+
Responsibilities
- Build and operate automation across asset discovery, authenticated scanning, triage, owner routing, and vulnerability closure verification.
- Diagnose failures in authenticated web application and API scans and bring remaining services into active coverage.
- Establish and operate an endpoint vulnerability management program in collaboration with IT.
- Architect scanning and assessment workflows for application, API, and endpoint systems.
- Drive remediation to closure with engineering and IT teams and identify additional automation opportunities.
Requirements
- Extensive professional experience in software or security engineering, with substantial dedicated depth in security engineering.
- Foundational understanding of AI/ML technologies and experience leveraging, securing, or positioning AI-driven solutions within a functional domain.
- Hands-on experience developing and running production security automation using Python, REST APIs, OAuth, token refresh, rate limiting, data parsing, and de-duplication.
- Ability to explain vulnerability exploit mechanics from attacker input through operational impact and identify the defensive controls needed to prevent them.
- In-depth web application and API security expertise, including authentication flows, CWE-level vulnerability analysis, and the full vulnerability lifecycle.
- Preferred: experience with AI/ML technologies and orchestration platforms for intelligent triage, remediation routing, and predictive exposure analysis.
- Preferred: experience deploying or administering Tenable, Qualys, CrowdStrike, Wiz, or Burp Suite, with knowledge of AWS, Azure, or GCP.
- Preferred: experience building internal security tooling adopted by engineering teams and using CISA KEV, EPSS, and asset criticality for risk prioritization.
Benefits
- Hybrid work arrangement.
- Various health plans, vacation and sick time off plans, parental leave options, retirement options, education reimbursement, and in-office perks.
Tech Stack
Categories
About Zscaler
Zscaler builds a cloud-delivered zero trust security platform that replaces traditional network security appliances for enterprises and public-sector organizations. Its Zero Trust Exchange provides secure web gateway, zero trust access, CASB, and cloud firewall services, sold as subscriptions and delivered across 160+ global data centers. Founded in 2007 and headquartered in San Jose, it is a public company on NASDAQ (ZS) serving thousands of customers worldwide.