Remote AI-Driven Threat Response Engineer

Zscaler; United States; On-site; USD 103,600 - 148,000; Full time

Benefits offered by this job

Time off plans for vacation and sick

Parental leave options

Retirement options

In‑office perks, and more!

Job summary

Zscaler is seeking a Threat Response & Remediation Engineer to join our remote team. You will own investigations from detection to remediation, partnering with customers to contain threats and restore secure operations.

You’ll collaborate with Detection Engineering, Intelligence, Research, and Product teams, participate in on-call rotations, and translate complex incidents into clear reports for diverse audiences.

Qualifications

• Proven history of integrating AI tools to enhance daily workflows.
• 4+ years of cybersecurity experience with proven ability to investigate threats and run investigations to completion.
• Hands-on experience with at least two EDR platforms (e.g., CrowdStrike, Defender, SentinelOne, Cortex, CarbonBlack).
• Deep understanding of Windows/macOS internals and network communications; Linux knowledge.
• Excellent written and verbal communication under pressure.

Responsibilities

• Conduct investigations using telemetry to contain and remediate threats in customer environments.
• Develop remediation plans and deliver clear reports of actions taken.
• Identify effective response strategies and tooling to improve security posture.
• Collaborate with Detection Engineering, Intelligence, Research, and Product Management to improve remediation approaches.
• Participate in an on-call rotation for 24x7 response and remediation coverage.

Skills

AI tools exploration

Cybersecurity experience

Incident response

Communication under pressure

Owner mindset

Tools

CrowdStrike

Microsoft Defender for Endpoint

Job description

Zscaler is seeking a Threat Response & Remediation Engineer to join our remote team. You will own investigations from detection to remediation, partnering with customers to contain threats and restore secure operations.

You’ll collaborate with Detection Engineering, Intelligence, Research, and Product teams, participate in on-call rotations, and translate complex incidents into clear reports for diverse audiences.