Zscaler SME

Akaasa Technologies; Charlotte (NC); Sur place; USD 90 000 - 140 000; Plein temps

Résumé du poste

Vanguard is seeking a Security Analyst to administer and optimize the Zscaler security platform, including ZIA and ZPA, Cloud Firewall, ATP, SSL inspection, and related protections.

The role collaborates with CSOC, Network Engineering, Infrastructure, and Business Applications teams to implement controls protecting users, apps, and data while preserving a seamless user experience. It entails policy governance, incident response, and ongoing service improvement for a robust SASE architecture.

Responsabilités

• Administer, monitor, and maintain Zscaler Cloud security platforms (ZIA, ZPA, Cloud Firewall, ATP, SSL inspection, Browser Isolation, Sandbox).
• Design, implement, and maintain security policies; handle change requests and policy reviews.
• Respond to escalated incidents with Incident Response teams during investigations and troubleshooting.
• Represent CSOC in enterprise security initiatives with GR&S, ES&F, IT and business units.
• Analyze data from multiple sources to identify threats and vulnerabilities; review logs and traffic patterns.
• Create ad-hoc reports requiring in-depth analysis for management.
• Collaborate with cyber team members on research projects involving event analysis to identify trends.
• Identify real-time attack patterns and propose mitigations.
• Mentor junior members to improve technical skills; participate in special projects.

Description du poste

Torc Assessment is required.

75% ZIA, 25% ZPA for the weighting

This task involves analyzing Meridian Financial's Zscaler Internet Access and Private Access policies and log excerpts, then explaining security risks, troubleshooting steps, and least-privilege configuration changes. Candidates will answer Written Questions in QUESTIONS.md about firewall rule ordering, SSL inspection and suspicious traffic, and ZPA application segmentation.

Job Profile Summary

Serve as a technical subject matter expert to the Threat Mitigation Team within Vanguard's Cyber Security Operations Center (CSOC). The Security Analyst is responsible for the administration, management, and continuous improvement of the Zscaler security platform. This role serves as a subject matter expert for Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), Cloud Firewall, Advanced Threat Protection, SSL Inspection, Data Protection, and related security capabilities. The analyst works closely with other CSOC teams, Network Engineering, Infrastructure, Endpoint Management, and Business Application teams to implement and maintain security controls that protect enterprise users, applications, and data while ensuring a seamless user experience.
The position combines technical administration, security operations, troubleshooting, policy governance, and continuous service improvement to support secure and resilient SASE architecture.

Job Description

Duties and Responsibilities

1. Administer, monitor and maintain Zscaler Cloud security platforms, including Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), Cloud Firewall, Advanced Threat Protection (ATP), SSL inspection services, Browser Isolation and Sandbox services. Perform platform configuration, policy management and service optimization. Provide support for feature enablement, upgrades and testing of new capabilities.


2. Design, implement and maintain the security policies used in the platform, including handling policy change requests, assessing the operational and security impacts of changes, and conducting periodic policy reviews to maintain effectiveness.


3. Independently assist and respond to escalated operational or security incidents collaborating with Incident Response teams during security investigations or operational troubleshooting.


4. Provides support in representing the CSOC in partnering with GR&S. ES&F, IT and the business on enterprise-wide security initiatives and projects.


5. Performs analysis derived from multiple data sets to identify changing threats and vulnerabilities. Identifies malicious activity by performing analysis on logs, traffic flows, and other investigative detective activities.


6. Develop ad-hoc reports as required by management that require in-depth analysis.


7. Collaborates with other cyber crew members on research projects involving event analysis to determine trends.


8. Identifies real-time complex attack patterns and suggests mitigation strategies.


9. Mentor junior team members to improve their technical acumen


10. Participates in special projects and performs other duties as assigned.