Note: The job is a remote job and is open to candidates in USA. Zscaler is a cloud security company providing a Zero Trust Exchange platform that protects organizations from cyberattacks and data loss. The Insider Risk Security Engineer will serve as a senior contributor on the Insider Risk program, leading detection engineering, investigations, playbook development, and stakeholder engagement with HR, Legal, and business leaders.
Responsibilities
- Sharpen the Insider Risk Program’s detection capabilities by refining rules to reduce noise, close coverage gaps, and surface high-fidelity alerts in adequate time
- Perform endpoint and user activity investigations using EDR/XDR, UEBA, and SIEM tools, managing cases end-to-end to create factual timelines
- Drive the development and iteration of insider Risk investigation playbooks, translating case patterns and lessons learned into scalable, defensible processes
- Serve as a key contact for HR, Legal, business leaders and other stakeholders on active investigations, preparing clear evidentiary case documentation
Skills
- * Foundational understanding of AI/ML technologies and experience leveraging, securing, or positioning AI-driven solutions to optimize outcomes within your functional domain
- * U.S. Citizenship required
- * Minimum 6+ years of experience in insider risk, data protection, fraud investigation, or security operations, with a proven track record in senior investigative roles, process ownership, and the design of detection frameworks and playbooks
- * Experience managing and dispositioning alerts within a SIEM or SOAR
- * Strong communication skills with proven ability to engage cross-functionally with HR, Legal, business leaders, and other stakeholders while maintaining discretion and sound judgment
- * Proficiency in Python or JavaScript with experience applying automation to investigative workflows
- * Hands-on experience with Zscaler's product portfolio (CyberRisk Protection, Data Protection, Zero Trust Networking) in a large-scale enterprise environment
- * Experience working with product development teams to implement security use cases
- * Relevant certifications (e.g., GCFA, GCFE) or equivalent forensics credentials; familiarity with industry frameworks (CERT, NIST, NSA)
Benefits
- Various health plans
- Time off plans for vacation and sick time
- Parental leave options
- Retirement options
- Education reimbursement
- In-office perks
Company Overview