Principal Threat Researcher

The role

You will act as the lead subject matter expert on adversary behavior in Endpoint and Cloud environments. You will analyze, replicate and counter advanced cyber attack techniques, and turn the research into detection recommendations for engineering and product teams.

What you will do

• Scope and refine research on emerging attack techniques across Windows, macOS or Linux and major Cloud/SaaS providers such as AWS, Microsoft 365 and Okta
• Dig into the technical components and detection data behind specific threats to understand how adversaries manipulate them
• Build automated attack code, test code and proofs of concept for new detections
• Collaborate with detection engineers, intelligence analysts and threat hunters to develop new detection methods
• Document and present findings to internal and external audiences
• Mentor junior team members and colleagues doing research

Required qualifications

• Foundational understanding of AI/ML technologies and experience leveraging, securing or positioning AI-driven solutions
• 12+ years of experience conducting security research with actionable outcomes
• Extensive security expertise in at least one operating system and experience with commercial EDR platforms
• Security experience with at least one cloud service provider (e.g., AWS, GCP, Azure), cloud architectures and cloud-based detection platforms
• Software development experience in at least one scripting language (e.g., PowerShell, Python) and one compiled language (e.g., C, C++, Rust, Go)
• Experience managing code with version control systems such as git/GitHub

Nice to have

• Proven ability to use AI technologies and workflows to drive measurable operational efficiency
• Established record of public community engagement, such as conference talks, technical blog posts or webinars
• Prior experience developing relationships with security vendors to drive product enhancements or building attack technique automation frameworks

Benefits

• Various health plans
• Time off plans for vacation and sick time
• Parental leave options
• Retirement options
• Education reimbursement
• In-office perks

Before you apply

• Hybrid working model and benefits details are linked in the posting

About the company

Zscaler provides a Zero Trust Exchange cloud security platform that protects customers from cyberattacks and data loss. The company describes itself as building an AI-native enterprise.