Remote Threat Researcher - AI-Driven Security

Candidate; Northern (KY); Hybrid; USD 123,000 - 175,000; Full time

Benefits offered by this job

Health plans

Paid time off

Parental leave

Education reimbursement

Job summary

Zscaler, a leader in cloud security, seeks a Staff Threat Researcher to dissect attacker tradecraft across endpoint, cloud, and identity environments. The role is remote, reporting to Threat Research leadership, and focuses on turning deep technical discoveries into scalable detection strategies.

You will drive adversarial research initiatives, build automated detection proofs, and guide engineering priorities while mentoring teammates and translating findings for internal and external audiences.

Qualifications

• Foundational understanding of AI/ML technologies and applying them to secure outcomes.
• Experience leveraging or positioning AI-driven solutions to optimize results.
• Experience with commercial Endpoint Detection & Response (EDR) and cloud detection platforms.
• Proficient in scripting (PowerShell, Python) and at least one compiled language (C, C++, Go).
• Security experience with at least one cloud provider (AWS, GCP, Azure).
• Established record of public engagement (talks, blog, webinars).
• Experience managing code with Git/GitHub.

Responsibilities

• Scope and refine research initiatives using adversarial analysis of emerging attack techniques.
• Investigate threats across Windows, macOS, Linux and major cloud/SaaS providers.
• Engineer automated attack code, write tests, and develop proof-of-concept detections.
• Collaborate with detection engineers, analysts, and threat hunters to prioritize deliverables.
• Document findings and mentor colleagues pursuing research.

Skills

AI/ML technologies

EDR & Cloud detection

Scripting (PowerShell, Python)

Compiled languages (C, C++, Go)

Cloud services (AWS, GCP, Azure)

Public/community engagement

Git/GitHub

Tools

None specified

Job description

Zscaler, a leader in cloud security, seeks a Staff Threat Researcher to dissect attacker tradecraft across endpoint, cloud, and identity environments. The role is remote, reporting to Threat Research leadership, and focuses on turning deep technical discoveries into scalable detection strategies.

You will drive adversarial research initiatives, build automated detection proofs, and guide engineering priorities while mentoring teammates and translating findings for internal and external audiences.