Description
Zscaler, a leading company in accelerating digital transformation, is seeking a Principal Vulnerability Management Engineer to join its team. This hybrid role, based in Bangalore, India, reports to the Senior Manager, Information Security Engineering in the Product Security department.
The successful candidate will help modernize how exposure is discovered, prioritized, and reduced across cloud, infrastructure, applications, APIs, endpoints, containers, and internet-facing assets. As an individual contributor, you will own the external attack surface management (EASM) technology, set the technical direction for the team, and engineer resilient systems that automate exposure identification, routing, and verified remediation.
Key responsibilities include:
- Owning EASM end-to-end, including discovering internet-facing assets, mapping each to its owner, confirming what is exploitable, routing findings to owners and the SOC, and verifying closure with evidence
- Designing and building the system behind the program, including ingestion, enrichment, storage, ticketing, and reconciliation
- Building risk-based prioritization that goes beyond standard CVSS, using exploitability, threat intelligence, runtime exposure, and business context
- Setting the technical direction for the team and mentoring engineers
- Driving remediation across engineering, IT, cloud security, and the SOC
The ideal candidate will have:
- 12+ years of experience in software or security engineering, with at least 8 years in security
- A foundational understanding of AI/ML technologies and experience leveraging, securing, or positioning AI-driven solutions
- Experience designing and building a security platform or system end-to-end and driving its adoption across teams to measurable results
- Deep understanding of how attacks and discovery work
- Experience setting technical direction for a team and growing engineers
Preferred qualifications include experience with EASM, CTEM, or attack-path analysis, and tools such as Tenable, Qualys, Wiz, CrowdStrike, or Burp Suite.
Zscaler offers a comprehensive benefits program, including various health plans, time off plans, parental leave options, retirement options, education reimbursement, and in-office perks.