Remote Threat Detection Analyst (AI-Driven Security)

Socket.dev; Bellevue (WA); On-site; USD 97,000 - 138,000; Full time

Job summary

Zscaler is seeking a Detection Analyst for a remote role (USA only). You will analyze EDR telemetry, alerts, and log sources across Endpoint, Identity, Network, and Cloud to identify and publish threats for our Managed Detection and Response customers.

You will drive projects that improve workflow through orchestration and automation, ensuring our customers receive high‑fidelity threat analysis and concise, actionable communications at scale.

Qualifications

• Demonstrated curiosity and active exploration of AI tools to enhance daily workflows and augment problem-solving.
• Strong experience in Endpoint (EDR) and one or more functional areas including Cloud/SaaS, Identity, Email, or Network detection domains
• Expertise using query languages and understanding syntax across EDR or other security platforms such as SQL or Lucene

Responsibilities

• Analyze EDR telemetry, alerts, and log sources across several detection domains including Endpoint, Identity, Network, and Cloud/SaaS
• Publish threats for customers using concisely written communication to effectively convey key indicators and remediation context
• Improve the Detection Operations workflow through orchestration and automation to manage high volumes of telemetry

Skills

AI tool experience

EDR / detection experience

SQL / Lucene queries

Job description

Zscaler is seeking a Detection Analyst for a remote role (USA only). You will analyze EDR telemetry, alerts, and log sources across Endpoint, Identity, Network, and Cloud to identify and publish threats for our Managed Detection and Response customers.

You will drive projects that improve workflow through orchestration and automation, ensuring our customers receive high‑fidelity threat analysis and concise, actionable communications at scale.