Senior Threat Response Engineer

Zscaler; United States; On-site; USD 140,000 - 190,000; Full time

Job summary

Zscaler is seeking a Senior Threat Response Engineer for a Remote (USA Only) role reporting to the Senior Manager, Threat Response Engineering in the Security Services group. You will respond to confirmed compromises on customer endpoints enrolled in the Active Remediation MDR service, performing investigations and rapid remediation.

You will collaborate with Detection Engineering, Threat Hunting, Intel, and Product teams to develop innovative remediation methods, while balancing urgency with

Qualifications

• Strong analytical and problem-solving skills demonstrated in security events.
• Mastery of EDR products including CrowdStrike, Defender for Endpoint, SentinelOne, or Carbon Black.
• Deep understanding of Windows and MacOS internals.
• Experience with AI tools to enhance workflows and problem-solving.
• Clear technical communication and documentation skills.
• Availability for Monday–Friday 8:00am–4:00pm MT and monthly on-call rotation.

Responsibilities

• Perform investigations into detected threats and analyze, contain, and remediate threats.
• Provide thorough reports of actions taken to show environment cleanup and protection strategies.
• Identify and implement effective response strategies to enhance security posture.
• Collaborate with Detection Engineering, Threat Hunting, Intel, and Product teams on remediation.
• Prioritize and execute tasks in a 24x7 on-call rotation in a fast-paced environment.

Skills

Analytical skills

Problem-solving

EDR expertise

CrowdStrike

Microsoft Defender for Endpoint

SentinelOne

Carbon Black

Windows OS

MacOS

AI tools

Technical documentation

On-call readiness

Tools

CrowdStrike

Microsoft Defender for Endpoint

SentinelOne

Carbon Black

Job description

About Zscaler

Zscaler accelerates digital transformation to ensure our customers can be more agile, efficient, resilient, and secure. As an AI-forward enterprise , we are constantly pushing the envelope, leveraging the world's largest security data lake to power our cloud-native Zero Trust Exchange platform. This innovation protects our customers from cyberattacks and data loss by securely connecting users, devices, and applications in any location.

Here, impact in your role matters more than title and trust is built on results. We say, impact over activity. We seek innovators who actively use AI to amplify their impact and who thrive in an environment where we leverage intelligent systems to stay ahead of evolving threats. We believe in transparency and value constructive, honest debate -we're focused on getting to the best ideas, faster. We build high-performing teams that can make an impact quickly and with high quality. To do this, we are building a culture of execution centered on customer obsession , collaboration, ownership, and accountability.

We value high-impact, high-accountability with a sense of urgency where you're enabled to do your best work and embrace your potential. If you're driven by purpose, thrive on solving complex challenges, and want to be part of the team that's helping to secure the AI age, we invite you to bring your talents to Zscaler and help shape the future of cybersecurity.

Role

We are looking for a Senior Threat Response Engineer to join our team. This is a Remote (USA Only) role, reporting to the Senior Manager, Threat Response Engineering in the ZSS - Security Services department. In this position, you will be responsible for responding to confirmed compromises on customer endpoints subscribed to the Active Remediation MDR service.

What you'll do (Role Expectations)

• Perform investigations into detected threats and leverage security products to analyze, contain, and remediate threats in customer environments
• Provide customers with thorough reports of actions taken to ensure clarity on environment cleanup and protection strategies
• Identify and implement effective response strategies to further enhance the security posture of the customer base
• Collaborate with Detection Engineering, Threat Hunting, Intel, and Product teams to develop innovative methods for timely threat remediation
• Prioritize and execute tasks effectively in a fast-paced operational environment while participating a 24x7 on-call rotation

Who You Are (Success Profile)

• You thrive in a dynamic, fast-paced environment, viewing ambiguity not as a hindrance but as the raw material to build meaningful solutions.
• You act like an owner with a strong passion for the mission and a bias for action, navigating seamlessly between high-level strategy and hands-on execution.
• You are a natural problem-solver who is energized by finding solutions to complex technical challenges, knowing that tackling hard problems delivers the biggest impact.
• You are a lifelong learner with a true growth mindset, actively seeking feedback to continuously develop yourself and become a stronger teammate.
• You are driven by innovation, possessing a deep curiosity for how things work and a belief in the power of technology to accelerate transformation.

What We're Looking for (Minimum Qualifications)

• Very strong analytical and problem-solving skills demonstrated through direct experience responding to security events and threats
• Mastery of Endpoint Detection and Response (EDR) products including CrowdStrike, Microsoft Defender for Endpoint, SentinelOne, or CarbonBlack
• Deep understanding of internal system functionality for Windows and MacOS operating systems
• Demonstrated understanding and experience with AI tools, with a proven history of integrating new technologies to enhance daily workflows and augment problem-solving
• Professional and articulate communication skills with the ability to provide clear technical documentation
• Ability to work Monday - Friday 8:00am - 4:00pm MT and ability to participate in a recurring, monthly on-call rotation

What Will Make You Stand Out (Preferred Qualifications)

• Strong understanding of security operations, enterprise technology, and network controls or protocols
• Experience utilizing AI-augmented development platforms to drive security automation, with a demonstrated capability to proactively refine or engineer new AI-based solutions that enhance operational velocity and tool efficacy
• Understanding of current and emerging adversary tactics and techniques, and the ability to practically apply this knowledge

#LI-KM9 #LI-Remote

Zscaler's salary ranges are benchmarked and are determined by role and level. The range displayed on each job posting reflects the minimum and maximum target for new hire salaries for the position across all US locations and could be higher or lower based on a multitude of factors, including job-related skills, experience, and relevant education or training.