Staff Detection Engineer

Zscaler (NASDAQ: ZS) accelerates digital transformation so customers can be more agile, efficient, resilient, and secure. The Zscaler Zero Trust Exchange platform protects thousands of customers from cyberattacks and data loss by securely connecting users, devices, and applications in any location.

• Analyze emerging threats, adversarial behaviors, and tactics, techniques, and procedures (TTPs) to understand attacker methodologies and improve detection capabilities.
• Conduct proactive and retroactive threat hunting using Zscaler telemetry.
• Pick the handful of numbers that tell you the area is healthy (fidelity, false-positive and false-negative rates, ATT&CK coverage, detector regressions) and do the work to move them in the right direction.
• Take what threat intel, hunts, and the analysts consuming your alerts tell you and turn it into what gets fixed and built next.
• Lead detection quality reviews for their coverage area, driving root-cause analysis, coordinating corrective actions, and setting the quality bar.
• Independently hunt and respond to customers while managing flexible operational schedules and on-call support.
• Identify and translate adversary behavior into actionable hunt hypotheses and detection logic.

• Foundational understanding of AI/ML technologies and experience leveraging, securing, or positioning AI-driven solutions.
• Deep detection experience in at least one of Endpoint (MDR), Cloud/SaaS, Identity, Email, or SIEM.
• A track record of owning technical work end-to-end and being answerable for its quality without much oversight.
• A strong grasp of how attackers operate, and fluent use of ATT&CK to decide where coverage should go.
• Detector-as-code, version control, code review, and controlled deployment as the way you already work (Git, CI/CD).
• A habit of judging detector quality by concrete numbers rather than gut feel.
• Preferred: Experience implementing AIOps, AI-driven predictive scaling, or automated anomaly detection.
• Preferred: Programming/scripting (Python, Go, Ruby, etc.) to build detection tooling and automation.
• Preferred: Reverse engineering or deeper malware analysis.
• Preferred: Previous red team or offensive security experience.

• This is a Hybrid role, reporting to the Senior Manager in the Threat Hunting department.
• Requires working flexible schedules, including weekend night shifts, to meet global operational demands.
• Zscaler offers comprehensive and inclusive benefits, including various health plans, time off plans, parental leave options, retirement options, education reimbursement, and in-office perks.