Threat Response & Remediation Engineer

About Zscaler Zscaler accelerates digital transformation to ensure our customers can be more agile, efficient, resilient, and secure. As an AI-forward enterprise, we are constantly pushing the envelope, leveraging the world’s largest security data lake to power our cloud-native Zero Trust Exchange platform. This innovation protects our customers from cyberattacks and data loss by securely connecting users, devices, and applications in any location. Here, impact in your role matters more than title and trust is built on results. We say, impact over activity. We seek innovators who actively use AI to amplify their impact and who thrive in an environment where we leverage intelligent systems to stay ahead of evolving threats. We believe in transparency and value constructive, honest debate—we’re focused on getting to the best ideas, faster. We build high-performing teams that can make an impact quickly and with high quality. To do this, we are building a culture of execution centered on customer obsession, collaboration, ownership, and accountability. We value high-impact, high-accountability with a sense of urgency where you’re enabled to do your best work and embrace your potential. If you’re driven by purpose, thrive on solving complex challenges, and want to be part of the team that’s helping to secure the AI age, we invite you to bring your talents to Zscaler and help shape the future of cybersecurity. Role We are looking for a Threat Response & Remediation Engineer to join our team. This is a Remote role, reporting to the Manager, Threat Response & Remediation in the Threat Response & Remediation department. In this role, you will act as a trusted partner and virtual boots on the ground for our customers, driving investigations, containing threats, and delivering complete remediation. You will take full ownership of customer success from detection through resolution, providing the expertise and clear communication needed to ensure their environments remain secure. What you’ll do (Role Expectations) - Perform investigations into detected threats using EDR, Network, and Identity telemetry to analyze, contain, and remediate threats in customer environments - Identify, scope, and manage ongoing customer incidents, developing remediation plans, and providing customers with thorough, clear reports of actions taken - Identify effective response strategies and innovative uses for existing tools to enhance customers' security posture, maximize efficiency, and minimize vulnerability - Collaborate with Detection Engineering, Intelligence, Research, and Product Management teams to develop new approaches to threat remediation and provide strategic insights for product improvement - Participate in an on-call rotation to provide 24x7 response and remediation coverage Who You Are (Success Profile) - You thrive in ambiguity and feel comfortable building the path forward in a dynamic environment, viewing complex security challenges as opportunities to build meaningful solutions. - You act like an owner with a deep passion for the mission and a strong bias for action, seamlessly navigating between high-level incident response strategy and hands-on technical execution. - You are a natural problem-solver who is energized by finding solutions to complex technical challenges, knowing that resolving the hardest security incidents delivers the biggest customer impact. - You are a high-trust collaborator who prioritizes team success, actively engaging in Zscaler's challenge culture by giving and receiving respectful feedback to build strong partnerships. - You are a dedicated learner with a true growth mindset, constantly seeking new insights and feedback to develop your technical skills and better support your teammates. What We’re Looking for (Minimum Qualifications) - Demonstrated curiosity and active exploration of AI tools, with a proven history of integrating new technologies to enhance daily workflows and augment problem-solving - 4+ years of cybersecurity experience with proven ability to independently investigate and analyze threats, respond to security incidents, and run investigations to completion - Working knowledge of EDR platforms with hands-on experience in at least two of: CrowdStrike, Microsoft Defender for Endpoint, SentinelOne, Palo Alto Cortex, or CarbonBlack, plus familiarity with Information Security controls across Endpoint, Cloud, SaaS, and Identity environments - Deep understanding of Windows and macOS operating system internals and network communications, with functional knowledge of Linux systems and strong analytical problem-solving skills - Excellent written and verbal communication skills with ability to clearly explain complex technical concepts to audiences of varying technical backgrounds, including under pressure What Will Make You Stand Out (Preferred Qualifications) - Foundational knowledge of Digital Forensics and Incident Response (DFIR) processes