Detection Analyst (Fully Remote)

Zscaler; United States; Remote; USD 120,000 - 160,000; Full time

Job summary

Zscaler seeks a security engineer to analyze EDR telemetry and log sources across endpoints, identity, network, and cloud services. You will correlate alerts and craft remediation guidance for customers, communicating findings clearly.

You will work with detection domains and query languages such as SQL or Lucene, exploring AI tools to adopt new techniques and improve detection coverage. Collaboration and precise communication are essential.

Qualifications

• Experience with EDR telemetry and security alerts across multiple domains.
• Ability to translate detections into actionable remediation guidance.
• Curiosity about AI tools and applying new techniques in security operations.

Responsibilities

• Analyze EDR telemetry, alerts, and log sources across Endpoint, Identity, Network, and Cloud/SaaS.
• Publish threats for customers with concise communication conveying key indicators and remediation.

Skills

EDR

Detection domains

SQL

Lucene

AI tooling

Tools

SQL

Lucene

Job description

• Analyze EDR telemetry, alerts, and log sources across Endpoint, Identity, Network, and Cloud/SaaS.
• Publish threats for customers with concise communication conveying key indicators and remediation.

Who You Are:

• High-trust collaborator with a challenge culture and a growth mindset.
• Customer-obsessed, data-driven, and focused on execution.

What We're Looking For:

• Strong experience in EDR and one or more detection domains; expertise in query languages like SQL or Lucene.
• Demonstrated curiosity in AI tools and integrating new technologies.

Zscaler

Zscaler accelerates digital transformation with a cloud security platform that protects customers from cyberattacks. With 160+ public exchanges globally, they are the world's largest in-line cloud security platform, fostering a culture of ownership, collaboration, and continuous feedback.