Description
Zscaler is looking for a Staff or Senior Staff Engineer, Vulnerability & Exposure Management to join their team. This hybrid role reports to the Senior Manager, Information Security Engineering in the Product Security department.
The successful candidate will lead efforts to discover and remediate vulnerabilities across web applications, APIs, and endpoints. They will build production-grade automation to uncover coverage gaps, route findings to asset owners, and verify closures to continuously safeguard the attack surface.
Key responsibilities include:
- Building and operating automation across the entire vulnerability lifecycle
- Diagnosing and fixing issues with authenticated web application and API scans
- Establishing and running endpoint vulnerability management as a routine operational program with IT
- Architecting and implementing scanning and assessment workflows for novel systems
- Driving remediation to closure with engineering and IT teams
The ideal candidate will have:
- A foundational understanding of AI/ML technologies and experience leveraging or securing AI-driven solutions
- Extensive professional experience in software or security engineering, with substantial depth in security engineering
- Hands-on experience developing and running security automation in production using Python, REST APIs, OAuth, and token refresh
- Demonstrated ability to dissect and articulate vulnerability exploit mechanics and defensive controls
- In-depth web application and API security expertise
Preferred qualifications include experience with AI/ML technologies, advanced orchestration platforms, and enterprise security tooling such as Tenable, Qualys, or CrowdStrike.
Zscaler offers a comprehensive benefits program, including various health plans, time off plans, parental leave options, retirement options, education reimbursement, and in-office perks.