Threat Response & Remediation Engineer

Stack

Responsibilities

• ▹Investigate detected threats using EDR, network, and identity telemetry to analyze, contain, and remediate threats in customer environments
• ▹Identify, scope, and manage ongoing customer incidents, develop remediation plans, and provide clear incident reports
• ▹Identify effective response strategies and innovative uses of existing tools to strengthen customers' security posture
• ▹Collaborate with Detection Engineering, Intelligence, Research, and Product Management to develop new remediation approaches
• ▹Participate in a 24x7 on-call rotation for response and remediation coverage

Requirements

• ▹Demonstrated curiosity and active use of AI tools to enhance daily workflows
• ▹4+ years of cybersecurity experience with proven ability to independently investigate threats and run incidents to completion
• ▹Hands-on experience with at least two EDR platforms (CrowdStrike, Microsoft Defender for Endpoint, SentinelOne, Palo Alto Cortex, or CarbonBlack), plus familiarity with Endpoint, Cloud, SaaS, and Identity security controls
• ▹Deep understanding of Windows and macOS internals and network communications, with functional Linux knowledge and strong analytical skills
• ▹Excellent written and verbal communication, able to explain complex technical concepts under pressure

Nice to have

• ▹Foundational knowledge of Digital Forensics and Incident Response (DFIR) processes
• ▹Strong understanding of enterprise technology, network controls, and security operations
• ▹Understanding of current adversary tactics and techniques, applicable in live response scenarios

Soft skills

What we offer

• ▹Various health plans
• ▹Paid vacation and sick time
• ▹Parental leave options
• ▹Retirement options
• ▹Education reimbursement
• ▹In-office perks even for a remote role

About the company

Zscaler builds the cloud-native Zero Trust Exchange platform, powered by one of the world's largest security data lakes, protecting customers from cyberattacks and data loss by securely connecting users, devices, and applications anywhere.