Detection Analyst
Bellevue, Washington, USA; Remote - D.C., USA; Remote - Georgia, USA; Remote - New York, USA; Remote - North Carolina, USA; Remote - Texas, USA; Remote - USA; Remote - Washington, USA; Santa Clara, California, USA; USA - Update Location. Posted a month ago
The role
This person will analyze EDR telemetry, alerts, and log sources across Endpoint, Identity, Network, and Cloud domains to identify threats. They will publish threat findings for Managed Detection and Response customers and improve workflows through orchestration and automation.
What you will do
- Analyze EDR telemetry, alerts, and log sources across Endpoint, Identity, Network, and Cloud/SaaS domains
- Publish threats for customers using concise writing that conveys key indicators and remediation context
- Improve Detection Operations workflow through orchestration and automation to manage high telemetry volumes
Required qualifications
- Demonstrated curiosity and active exploration of AI tools, with a history of integrating new technologies into workflows
- Strong experience in Endpoint (EDR) and one or more of Cloud/SaaS, Identity, Email, or Network detection domains
- Expertise using query languages and understanding syntax across EDR or other security platforms such as SQL or Lucene
Nice to have
- Practical experience applying AI-driven tools or automated workflows to accelerate threat detection and security engineering
- Previous professional experience in a Red Team or offensive security capacity
- Active involvement in the Infosec community through blogs, webinars, or conference presentations
Benefits
- Various health plans
- Vacation and sick time plans
- Parental leave options
- Retirement options
- Education reimbursement
- In-office perks
About the company
Zscaler provides a Zero Trust Exchange platform that protects customers from cyberattacks and data loss by securely connecting users, devices, and applications. Its SASE-based platform runs across 200+ public data centers globally.