Remote Senior Threat Researcher

Openkrill; United States; Remote; USD 123,000 - 175,000; Full time

Benefits offered by this job

Health plans

Time off plans

Parental leave options

Retirement options

Education reimbursement

In-office perks

Job summary

Zscaler is seeking a Staff Threat Researcher to join the Threat Research Team in a remote US role. You will dissect adversary tradecraft across endpoints, cloud, and identity, building scalable detection recommendations from deep technical research.

You will craft automated attack code, write test code, and develop proofs of concept while collaborating with engineers and threat hunters to shape detection priorities and product strategy.

Qualifications

• Foundational understanding of AI/ML technologies and experience leveraging or securing AI-driven solutions.
• Experience with commercial Endpoint Detection & Response (EDR) and/or Cloud-based detection platforms.
• Software development experience in at least one scripting language (PowerShell, Python) and one compiled language (C/C++, Go).
• Security experience in at least one cloud service provider (AWS, GCP, Azure) and Cloud architectures.
• Established record of public, community engagement (conference talks, blog posts, or webinars).
• Experience managing code with git/GitHub.

Responsibilities

• Scope and refine research initiatives across operating systems (Windows, macOS, Linux) and major Cloud/SaaS providers.
• Dive deep into threat components and detection optics behind specific threats.
• Engineer automated attack code and develop proofs of concept for new detections.
• Collaborate with detection engineers, analysts, and threat hunters to prioritize deliverables.
• Document findings and mentor colleagues pursuing research.

Skills

AI/ML fundamentals

EDR / Cloud detection

Scripting (PowerShell, Python)

Compiled languages (C/C++, Go)

Cloud security

Git / GitHub

Public engagement

Threat research

Job description

Zscaler is seeking a Staff Threat Researcher to join the Threat Research Team in a remote US role. You will dissect adversary tradecraft across endpoints, cloud, and identity, building scalable detection recommendations from deep technical research.

You will craft automated attack code, write test code, and develop proofs of concept while collaborating with engineers and threat hunters to shape detection priorities and product strategy.