Information Security Engineer (Thick Client Testing / Harness / VAPT)

The role

You will lead penetration testing of Zscaler applications and infrastructure and run deep security architecture reviews. You will prioritise vulnerabilities with engineering and operations teams and build security automation.

What you will do

• Conduct advanced penetration testing on applications and infrastructure, using AI to identify and mitigate risks
• Conduct security architecture reviews and give strategic recommendations for complex systems
• Partner with engineering and operations teams to prioritise vulnerabilities for remediation
• Design and implement security automation to streamline repetitive tasks
• Diagnose problems that cannot be reproduced locally, using telemetry and instrumentation

Required qualifications

• Foundational understanding of AI/ML technologies and experience leveraging, securing, or positioning AI-driven solutions
• 3-5 years of experience in manual security assessments of web applications, thick clients, and APIs using industry-leading tools
• Expertise in thick client penetration testing across Windows, Mac, Linux, Android, and iOS
• Proven experience conducting security architecture reviews in network security and complex application environments
• Strong fundamental knowledge of security concepts, cryptography, Unix architecture, and networking
• Ability to read and debug C/C++, Java, or JavaScript and build custom testing harnesses

Nice to have

• Proven ability to leverage AI technologies and workflows to drive measurable operational efficiency
• Proven ability to validate findings and perform thorough root cause analysis
• Advanced scripting knowledge used to automate repetitive security tasks and research
• Experience or interest in emerging security research areas including container, AI/ML, or cloud security

Benefits

• Various health plans
• Time off plans for vacation and sick time
• Parental leave options
• Retirement options
• Education reimbursement
• In-office perks

Before you apply

• Accommodations and adjustments are available in the recruiting process for candidates who are differently abled, have long-term or mental health conditions, hold sincerely held religious beliefs, are

About the company

Zscaler provides the Zero Trust Exchange platform, a SASE-based in-line cloud security platform that securely connects users, devices, and applications. It operates across 200+ public data centers globally.