Staff Detection Engineer

The role

This role leads threat hunting and detection engineering. The job covers analyzing threats and attacker methods, improving detection coverage using Zscaler telemetry, and running proactive and retroactive hunts. The role is hybrid and includes flexible schedules, including weekend night shifts.

What you will do

• Track the metrics that show detection health, such as fidelity, false positive and false negative rates, ATT&CK coverage, and detector regressions, and improve them
• Turn threat intel, hunt results, and analyst feedback into fixes and new detections
• Lead detection quality reviews for your coverage area, including root-cause analysis and corrective actions
• Hunt and respond to customer threats independently
• Turn adversary behavior into hunt hypotheses and detection logic

Required qualifications

• Foundational understanding of AI/ML technologies and experience using, securing, or positioning AI-driven solutions
• Deep detection experience in at least one of Endpoint (MDR), Cloud/SaaS, Identity, Email, or SIEM
• A record of owning technical work end-to-end with little oversight
• Strong understanding of attacker methods and fluent use of ATT&CK
• Detector-as-code, version control, code review, and controlled deployment (Git, CI/CD)
• Judging detector quality with concrete numbers

Nice to have

• Experience with AIOps, AI-driven predictive scaling, or automated anomaly detection
• Programming or scripting (Python, Go, Ruby, etc.) to build detection tooling and automation
• Reverse engineering or deeper malware analysis, where relevant (valued, not required)
• Previous red team or offensive security experience

Benefits

• Various health plans
• Vacation and sick time plans
• Parental leave options
• Retirement options
• Education reimbursement
• In-office perks

Before you apply

• Accommodations or adjustments are available in the recruiting process for candidates who are differently abled, have long-term or mental health conditions, hold sincerely held religious beliefs, are n

About the company

Zscaler (NASDAQ: ZS) provides cloud security through its Zero Trust Exchange platform, which securely connects users, devices, and applications in any location. Its SASE-based platform runs across 200+ public data centers globally.