Detection Analyst

Summary

Zscaler accelerates digital transformation through its Zero Trust Exchange cloud security platform, helping customers protect against cyberattacks and data loss. The Detection Analyst will analyze EDR telemetry, alerts, and logs across Endpoint, Identity, Network, and Cloud domains, publish actionable threat communications, and improve detection workflows through orchestration and automation.

Responsibilities

• Analyze EDR telemetry, alerts, and log sources across several detection domains including Endpoint, Identity, Network, and Cloud/SaaS
• Publish threats for customers using concisely written communication to effectively convey key indicators and remediation context
• Improve the Detection Operations workflow through orchestration and automation to manage high volumes of telemetry

Skills

• * Demonstrated curiosity and active exploration of AI tools, with a proven history of integrating new technologies to enhance daily workflows and augment problem-solving
• * Strong experience in Endpoint (EDR) and one or more functional areas including Cloud/SaaS, Identity, Email, or Network detection domains
• * Expertise using query languages and understanding syntax across EDR or other security platforms such as SQL or Lucene
• * Practical experience applying AI-driven tools or automated workflows to accelerate threat detection and security engineering
• * Previous professional experience in a Red Team or offensive security capacity
• * Active involvement in the Infosec community through writing blogs, participating in webinars, or presenting at conferences

Qualifications

Must Haves

• * Demonstrated curiosity and active exploration of AI tools, with a proven history of integrating new technologies to enhance daily workflows and augment problem-solving
• * Strong experience in Endpoint (EDR) and one or more functional areas including Cloud/SaaS, Identity, Email, or Network detection domains
• * Expertise using query languages and understanding syntax across EDR or other security platforms such as SQL or Lucene

Nice to Haves

• * Practical experience applying AI-driven tools or automated workflows to accelerate threat detection and security engineering
• * Previous professional experience in a Red Team or offensive security capacity
• * Active involvement in the Infosec community through writing blogs, participating in webinars, or presenting at conferences

Benefits

• Remote (USA Only) role
• Various health plans
• Time off plans for vacation and sick time
• Parental leave options
• Retirement options
• Education reimbursement
• In-office perks