Principal Vulnerability Management Engineer

The role

This role owns external attack surface management technology end to end, from discovering internet-facing assets to verifying remediation. The engineer will also set the technical direction for the team and mentor engineers.

What you will do

• Own EASM end to end: discover internet-facing assets, map each to its owner, confirm what is exploitable, route findings and verify closure with evidence
• Design and build ingestion, enrichment, storage, ticketing and reconciliation systems that run daily and alert on failure
• Build risk-based prioritization beyond CVSS using exploitability, threat intelligence, runtime exposure and business context
• Set technical direction for the team and mentor engineers
• Drive remediation across engineering, IT, cloud security and the SOC
• Report exposure trends to leadership

Required qualifications

• Foundational understanding of AI/ML technologies and experience leveraging, securing or positioning AI-driven solutions
• 12+ years of experience in software or security engineering, including at least 8 years in security
• Experience designing and building a security platform end to end and driving adoption across teams
• Ability to write and debug code (Python, APIs, data pipelines); AI-assisted coding is welcome if you can explain and debug what you ship
• Deep understanding of how attacks and discovery work, including authenticated and unauthenticated scanning, coverage gaps and asset correlation
• Experience setting technical direction for a team, growing engineers, and explaining exposure risk to senior leadership

Nice to have

• Experience with AI/ML and orchestration platforms for triage, automated remediation routing and predictive exposure analysis
• Hands-on experience with EASM, CTEM or attack-path analysis
• Experience with tools such as Tenable, Qualys, Wiz, CrowdStrike or Burp Suite
• Cloud network exposure across AWS, Azure and GCP, Kubernetes and container security, at large scale

Benefits

• Various health plans
• Time off plans for vacation and sick time
• Parental leave options
• Retirement options
• Education reimbursement
• In-office perks

Before you apply

• Applicants must adhere to applicable laws, regulations and Zscaler security and privacy policies

About the company

Zscaler provides the Zero Trust Exchange platform, a SASE-based cloud security platform that securely connects users, devices and applications. It operates across 200+ public data centers globally.