Staff Detection Engineer

Zscaler accelerates digital transformation so customers can be more agile, efficient, resilient, and secure. The Zscaler Zero Trust Exchange platform protects thousands of customers from cyberattacks and data loss by securely connecting users, devices, and applications in any location.

We are looking for a Staff Detection Engineer to join our team. This is a Hybrid role, reporting to the Senior Manager in the Threat Hunting department. You will analyze emerging threats, adversarial behaviors, and tactics, techniques, and procedures (TTPs) to understand attacker methodologies and improve detection capabilities across our global ecosystem.

Role Expectations

• Monitor key performance indicators such as fidelity, false-positive and false-negative rates, ATT&CK coverage, and detector regressions, and take corrective actions to improve them.
• Translate threat intelligence, hunting results, and analyst feedback into actionable items for future enhancements.
• Lead detection quality reviews, drive root-cause analysis, coordinate corrective actions, and set quality standards to minimize misses and false positives.
• Conduct proactive and retroactive threat hunting using Zscaler telemetry, working flexible schedules including weekend night shifts.
• Identify and articulate adversary behavior into actionable hunt hypotheses and detection logic.

Who You Are

• Comfortable with ambiguity and dynamic environments.
• Act with ownership and integrity, driven by a passion for the mission.
• Strong problem-solving skills, focused on finding solutions.
• Collaborative team player with a growth mindset.

Minimum Qualifications

• Understanding of AI/ML technologies and experience with AI-driven solutions.
• Deep detection experience in areas like Endpoint, Cloud/SaaS, Identity, Email, or SIEM.
• Proven track record of owning technical work end-to-end.
• Strong grasp of attacker operations and ATT&CK framework usage.
• Experience with detector-as-code, version control, and CI/CD pipelines.

Preferred Qualifications

• Experience with AIOps, AI-driven predictive scaling, or automated anomaly detection.
• Programming/scripting skills in languages like Python, Go, or Ruby.
• Background in reverse engineering or malware analysis.
• Previous red team or offensive security experience.

Benefits

• Comprehensive health plans.
• Time off plans for vacation and sick time.
• Parental leave options.
• Retirement options.
• Education reimbursement.
• In-office perks.