Insider Risk Security Engineer

The role

You will sharpen insider risk detection rules and lead investigations using EDR, XDR, UEBA and SIEM tools. You will refine playbooks, mentor junior analysts, and act as a key contact for HR, Legal and business leaders on active cases.

What you will do

• Refine insider risk detection rules to reduce noise, close coverage gaps and surface high-fidelity alerts
• Investigate endpoint and user activity using EDR/XDR, UEBA and SIEM tools, managing cases end-to-end
• Build factual timelines and clear evidentiary case documentation
• Develop and iterate insider risk investigation playbooks
• Serve as key contact for HR, Legal, business leaders and other stakeholders on active investigations
• Mentor junior analysts
• Take operational direction from the Insider Risk Team Lead

Required qualifications

• Foundational understanding of AI/ML technologies and experience leveraging, securing or positioning AI-driven solutions
• U.S. citizenship required
• Minimum 6+ years of experience in insider risk, data protection, fraud investigation or security operations
• Proven track record in senior investigative roles, process ownership and design of detection frameworks and playbooks
• Experience managing and dispositioning alerts within a SIEM or SOAR
• Strong communication skills with cross-functional engagement and discretion
• Proficiency in Python or JavaScript with experience applying automation to investigative workflows

Nice to have

• Demonstrated curiosity and active exploration of AI tools, with a history of integrating new technologies into workflows
• Hands-on experience with Zscaler's product portfolio (CyberRisk Protection, Data Protection, Zero Trust Networking) in a large-scale enterprise environment
• Experience working with product development teams to implement security use cases
• Relevant certifications (e.g., GCFA, GCFE) or equivalent forensics credentials; familiarity with CERT, NIST and NSA frameworks

Benefits

• Various health plans
• Vacation and sick time off plans
• Parental leave options
• Retirement options
• Education reimbursement
• In-office perks

Before you apply

• U.S. citizenship is required
• Base salary range excludes commission, bonus, equity and benefits

About the company

Zscaler (NASDAQ: ZS) provides the Zero Trust Exchange platform, which protects customers from cyberattacks and data loss by securely connecting users, devices and applications in any location. It describes its Zero Trust Exchange as the world's largest in-line cloud security platform.