Senior IT Security Operations Engineer

Zscaler (NASDAQ: ZS) accelerates digital transformation so customers can be more agile, efficient, resilient, and secure. The Zscaler Zero Trust Exchange™️ platform protects thousands of customers from cyberattacks and data loss by securely connecting users, devices, and applications in any location. Distributed across 160+ public exchanges globally and thousands of private exchanges at the edge, the SASE-based Zero Trust Exchange is the world’s largest in-line cloud security platform. We believe the future of work is Human + AI and are building an AI-native enterprise where human potential is amplified by machine intelligence to solve the world’s hardest security challenges. Driven by deep customer obsession, we are committed to the mission, outcome, and to each other. We bring these commitments to life through three core behaviors: ownership and collaboration, trust through outcomes and impact, and a challenge culture with ongoing feedback. Ready to make an impact at the company pioneering security transformation in the AI era? Join us at Zscaler. Role We are looking for a Senior IT Security Operations Engineer, Corporate Infrastructure to join our team. This is a Remote within the United States (with a hybrid preference for San Jose, CA) role, reporting to the Director - Zscaler on Zscaler in the Corporate Infrastructure department. As the operational backbone of the security team, you will keep policies tuned, alerts triaged, and platforms healthy while supporting Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), Zscaler Digital Experience (ZDX), AI Security, and Cloud Security (CSPM/DSPM) to mature our DevSecOps model. What you’ll do (Role Expectations) - Provide day-to-day operational support, configuration, policy tuning, and platform health monitoring for ZIA, ZPA, ZDX, AI Security, and Cloud Security - Configure and maintain zero trust policies covering user-to-application access, posture checking, SSL/TLS inspection, content filtering, and access control - Deploy and tune Cloud Security Posture Management (CSPM) and Data Security Posture Management (DSPM) policies, collaborating with environment owners on remediation - Utilize ZDX to monitor application and user experience issues, correlating findings with network and security telemetry to identify root causes - Support DLP policy tuning, alert triage, SOP documentation, and on-call incident response while helping automate repetitive workflows Who You Are (Success Profile) - You are a problem-solver. You seek out challenges because you are energized by finding solutions, knowing that solving hard problems delivers the biggest impact. - You act like an owner. Your passion for the mission fuels your bias for action, taking full accountability for security platform health with high integrity. - You are driven by innovation. You have a deep curiosity for how things work and leverage automation and AI tools to continuously improve security workflows. - You champion simplicity. You are skilled at distilling complex cloud, network, and security architectures into clear, simple, and actionable operational procedures. - You are a high-trust collaborator. You build strong cross-functional partnerships across environment owners, support teams, and product groups to drive security outcomes. What We’re Looking for (Minimum Qualifications) - Demonstrated curiosity and active exploration of AI tools, with a proven history of integrating new technologies to enhance daily workflows and augment problem-solving - U.S. Citizenship required due to specific customer security requirements - 5+ years of experience in IT security operations, network security, or a related technical domain - Hands-on experience administering Zscaler ZIA and/or ZPA security platforms - Working knowledge of zero trust concepts, including identity verification, role-based access control, network segmentation, and posture checking - Practical understanding of cloud architecture (AWS, Azure, GCP), OS fundamentals (Windows, macOS, Linux), networking concepts, and authentication protocols What Will Make You Stand Out (Preferred Qualifications) - Hands-on configuration experience with SSL/TLS inspection, DLP, SIEM integration, log streaming (NSS), and EDR platforms such as CrowdStrike Falcon - Strong network troubleshooting skills utilizing tools like tcpdump, Wireshark, ping, and traceroute/MTR alongside familiarity with DevSecOps workflows - Active technical certifications such as Zscaler ZCCA/ZCCP, CrowdStrike CCFA/CCFR, Security+, or CISSP #LI-YC2 #LI-Remote Zscaler’s salary ranges are benchmarked and are determined by role and level. The range displayed on each job posting reflects the minimum and maximum target for new hire salaries for the position across all US locations and could be higher or lower based on a multitude of factors, including job-related skills, experience, and relevant education or training. The base salary range listed for this

Demonstrated curiosity and active exploration of AI tools, with a proven history of integrating new technologies to enhance daily workflows and augment problem-solving. U.S. Citizenship required due to specific customer security requirements. 5+ years of experience in IT security operations, network security, or a related technical domain. Hands-on experience administering Zscaler ZIA and/or ZPA security platforms. Working knowledge of zero trust concepts, including identity verification, role-based access control, network segmentation, and posture checking. Practical understanding of cloud architecture (AWS, Azure, GCP), OS fundamentals (Windows, macOS, Linux), networking concepts, and authentication protocols.

Provide day-to-day operational support, configuration, policy tuning, and platform health monitoring for ZIA, ZPA, ZDX, AI Security, and Cloud Security. Configure and maintain zero trust policies covering user-to-application access, posture checking, SSL/TLS inspection, content filtering, and access control. Deploy and tune CSPM and DSPM policies, collaborating with environment owners on remediation. Utilize ZDX to monitor application and user experience issues, correlating findings with network and security telemetry to identify root causes. Support DLP policy tuning, alert triage, SOP documentation, and on-call incident response while helping automate repetitive workflows.