Staff Detection Engineer

The role

You will own a detection coverage area and be accountable for its technical direction and efficacy. You will set the bar for detection content and handle the most complex design decisions and detector implementations.

What you will do

• Own your domain's health, backlog prioritization and performance as the main point of contact
• Tackle the hardest detection challenges and set design patterns, coding standards and implementation blueprints
• Define criteria for validated, tuned and maintainable content using design and code reviews and root-cause analyses
• Drive area health numbers: detection fidelity, ATT&CK coverage, false-positive and false-negative rates, regression prevention
• Turn threat intelligence, threat hunting and SOC analyst feedback into roadmap priorities and engine improvements

Required qualifications

• Foundational understanding of AI/ML technologies and experience leveraging, securing or positioning AI-driven solutions
• Deep detection experience in at least one of Endpoint (MDR), Cloud/SaaS, Identity, Email or SIEM
• A track record of owning technical work end-to-end and being answerable for its quality without much oversight
• Strong grasp of how attackers operate and fluent use of ATT&CK
• Detector-as-code, version control, code review and controlled deployment (Git, CI/CD)

Nice to have

• Experience leveraging AI-driven automation, LLMs or machine learning models to accelerate detection engineering and threat analysis
• Programming or scripting (Python, Go, Ruby, etc.) to build detection tooling and automation
• Reverse engineering or deeper malware analysis, where relevant to your domain

Benefits

• Various health plans
• Time off plans for vacation and sick time
• Parental leave options
• Retirement options
• Education reimbursement
• In-office perks

Before you apply

• Applicants must adhere to applicable laws, regulations and Zscaler security and privacy policies
• Accommodations are available in the recruiting process

About the company

Zscaler provides a cloud security platform, the Zero Trust Exchange, that protects customers from cyberattacks and data loss. It describes itself as building an AI-native enterprise.