Staff Threat Researcher

The role

This person will act as a technical expert on adversary tradecraft across endpoint, cloud and identity environments. They will research how cyber attacks work, build attack automations and turn findings into detection recommendations.

What you will do

• Scope and refine research on emerging attack techniques across Windows, macOS or Linux and major cloud/SaaS providers such as AWS, Microsoft 365 and Okta
• Dive deep into the technical components and detection optics behind specific threats
• Engineer automated attack code, write test code to validate threat coverage and build proofs of concept for new detections
• Collaborate with detection engineers, intelligence analysts and threat hunters to develop detection methods and engineering recommendations
• Document and present research findings to internal and external audiences
• Mentor colleagues pursuing research

Required qualifications

• Foundational understanding of AI/ML technologies and experience leveraging, securing or positioning AI-driven solutions
• Experience with commercial Endpoint Detection & Response (EDR) and/or cloud-based detection platforms
• Software development experience in at least one scripting language (e.g. PowerShell, Python) and one compiled language (e.g. C, C++, Go)
• Security experience with at least one cloud service provider (e.g. AWS, GCP, Azure) and cloud architectures
• Established record of public community engagement such as conference talks, blog posts or webinars
• Experience managing code with git/GitHub

Nice to have

• Proven ability to leverage AI technologies and workflows to drive measurable operational efficiency
• An established record of public community engagement such as conference talks, technical blog posts or webinars

Benefits

• Various health plans
• Vacation and sick time off plans
• Parental leave options
• Retirement options
• Education reimbursement
• In-office perks

Before you apply

• Zscaler's hybrid working model is linked in the posting

About the company

Zscaler (NASDAQ: ZS) provides a cloud security platform, the Zero Trust Exchange, that protects customers from cyberattacks and data loss. The company describes its platform as the world's largest in-line cloud security platform.