Senior Staff Security Researcher

About the position

Zscaler is looking for a Senior Staff Security Researcher to join our Engineering team. Reporting to the Senior Director of Information Security, you will be responsible for investigating product vulnerabilities and security incidents, developing remediation strategies, conducting research into attack vectors, malware, and exploitation techniques, collaborating with various stakeholders for incident resolution, and monitoring systems for alerts while maintaining incident and vulnerability reports.

Responsibilities

• Investigating product vulnerabilities and security incidents and developing remediation strategies
• Conducting research into attack vectors, malware, and exploitation techniques to inform and enhance defenses
• Collaborating with engineering, development teams, legal stakeholders, and external researchers for incident resolution
• Monitoring systems for alerts, analyzing threats, and maintaining incident and vulnerability reports

Requirements

• 7+ years of cybersecurity experience, particularly in incident response or product security
• Bachelor’s degree (or equivalent experience) in a relevant field like Cybersecurity, Computer Science, or Information Systems
• Proficiency in security principles, secure coding practices, and protocols (e.g., HTTP, TCP/IP)
• Hands-on experience managing security incidents, including malware and exploits
• Experience with SIEMs, vulnerability scanners, and scripting tools like Python or PowerShell

Nice-to-haves

• Certifications like CISSP, CEH, OSCP, or related credentials
• Experience with SDLC (secure development lifecycle) and code reviews
• Advanced tools proficiency (e.g., EDR platforms, threat intelligence tools)

Benefits

• Various health plans
• Time off plans for vacation and sick time
• Parental leave options
• Retirement options
• Education reimbursement
• In-office perks, and more!