Countermeasures Engineer (Public Cloud)

About Zscaler

Zscaler (NASDAQ: ZS) accelerates digital transformation so that customers can be more agile, efficient, resilient, and secure. The Zscaler Zero Trust Exchange is the company’s cloud-native platform that protects thousands of customers from cyberattacks and data loss by securely connecting users, devices, and applications in any location. 

With more than 10 years of experience developing, operating, and scaling the cloud, Zscaler serves thousands of enterprise customers around the world, including 450 of the Forbes Global 2000 organizations. In addition to protecting customers from damaging threats, such as ransomware and data exfiltration, it helps them slash costs, reduce complexity, and improve the user experience by eliminating stacks of latency-creating gateway appliances. 

Zscaler was founded in 2007 with a mission to make the cloud a safe place to do business and a more enjoyable experience for enterprise users. Zscaler’s purpose-built security platform puts a company’s defenses and controls where the connections occur—the internet—so that every connection is fast and secure, no matter how or where users connect or where their applications and workloads reside.

Job Description

We are seeking a highly skilled senior Countermeasures Engineer to join our dynamic team. As a Countermeasures Engineer focused on Public Cloud, you will play a crucial role in developing and implementing effective security countermeasures to defend against cyber threats. You will work closely with our security operations team to maintain and grow visibility as well as detection and response capabilities to protect Zscaler users and systems.

Key Responsibilities

• Application Ownership: Act as SME for public cloud technologies to mature logging and monitoring of public cloud environments, measure alerting efficiency, reduce time-to-detect. monitor health of cloud monitoring, and provide expertise in cloud investigations.
• Countermeasure Development: Design, develop, and implement innovative security countermeasures to proactively detect and mitigate cyber threats.
• Software Development: Leverage your software development skills to create custom scripts, tools, and automation to enhance our security capabilities.
• SOAR Integration: Integrate security orchestration, automation, and response (SOAR) solutions to streamline incident response processes and automate routine tasks.
• EDR Expertise: Utilize your knowledge of Endpoint Detection and Response to enhance our threat detection and incident response capabilities.
• XDR Expertise: Utilize your knowledge of Extended Detection and Response (XDR) technologies to implement risk-based-alerting and response timeline capabilities.
• Threat Analysis: Analyze emerging threats and vulnerabilities to develop effective countermeasures and stay ahead of cyber adversaries.
• Documentation: Create comprehensive documentation for countermeasures, scripts, and processes to facilitate knowledge sharing and training within the organization.
• Collaboration: Collaborate with cross-functional teams, including security analysts, engineers, and threat hunters, to enhance our cybersecurity defense strategy.
• Continuous Improvement: Stay up-to-date with the latest cybersecurity trends, tools, and techniques to continuously improve our countermeasure capabilities.

Qualifications

• Bachelor's degree in Computer Science, Information Security, or a related field (Master's degree preferred).
• At least 3 years building public cloud monitoring and mitigation development
• Preference to have additional experience implementing, maintaining and supporting security technologies such as SIEM, SOAR, XDR, and EDR
• Proven experience in software development and scripting (C/C++, Java, Python, PowerShell, etc.)
• Experience leveraging data-driven methodologies of evaluating technology and countermeasure effectiveness
• Strong knowledge of cybersecurity principles, threat landscape, and attack vectors.
• Excellent problem-solving skills and the ability to think creatively to develop innovative countermeasures.
• A problem-solver mentality who can take on large, undefined projects with minimal supervision
• Ability to be on-call to support after-hours incidents in an on-needed basis
• Effective communication and teamwork skills.
• Relevant certifications such as CISSP, CEH, or CompTIA Security+ are a plus.

#LI-JM1

#LI-REMOTE

Zscaler’s salary ranges are benchmarked and are determined by role and level. The range displayed on each job posting reflects the minimum and maximum target for new hire salaries for the position across all US locations and could be higher or lower based on a multitude