Remote Insider Risk Engineer | Detection & Investigations

Zscaler, Inc.; Oregon; Hybrid; USD 134,000 - 168,000; Full time

Benefits offered by this job

Health plans

Vacation & sick time

Parental leave

Retirement options

Education reimbursement

In-office perks

Job summary

Zscaler, Inc. is seeking an Insider Risk Security Engineer for a remote US-based role reporting to the Senior Architect in Enterprise Security.

You will contribute as a senior investigator, refining playbooks, leading detection engineering, and mentoring junior analysts while coordinating with HR, Legal, and executives. You will drive investigation workflows using EDR/XDR, UEBA, and SIEM tools, building defensible processes, and representing the team with stakeholder groups across the

Qualifications

• Minimum 6+ years of insider risk, data protection, fraud investigation, or security operations experience.
• U.S. Citizenship required.
• Experience managing alerts within a SIEM or SOAR.
• Proficiency in Python or JavaScript with automation experience.
• Strong cross-functional communication with HR, Legal, business leaders, and other stakeholders.

Responsibilities

• Sharpen the Insider Risk Program's detection capabilities by refining rules to reduce noise, close coverage gaps, and surface high-fidelity alerts in adequate time
• Perform endpoint and user activity investigations using EDR/XDR, UEBA, and SIEM tools, managing cases end-to-end to create factual timelines
• Drive the development and iteration of insider Risk investigation playbooks, translating case patterns and lessons learned into scalable, defensible processes
• Serve as a key contact for HR, Legal, business leaders and other stakeholders on active investigations, preparing clear evidentiary case documentation

Skills

AI/ML concepts

Python

JavaScript

Tools

SIEM

SOAR

Job description

Zscaler, Inc. is seeking an Insider Risk Security Engineer for a remote US-based role reporting to the Senior Architect in Enterprise Security.

You will contribute as a senior investigator, refining playbooks, leading detection engineering, and mentoring junior analysts while coordinating with HR, Legal, and executives. You will drive investigation workflows using EDR/XDR, UEBA, and SIEM tools, building defensible processes, and representing the team with stakeholder groups across the