Senior Security Researcher (US Citizenship required)

Company Description

Zscaler (NASDAQ: ZS) accelerates digital transformation so that customers can be more agile, efficient, resilient, and secure. The Zscaler Zero Trust Exchange is the company’s cloud-native platform that protects thousands of customers from cyberattacks and data loss by securely connecting users, devices, and applications in any location. 

With more than 10 years of experience developing, operating, and scaling the cloud, Zscaler serves thousands of enterprise customers around the world, including 450 of the Forbes Global 2000 organizations. In addition to protecting customers from damaging threats, such as ransomware and data exfiltration, it helps them slash costs, reduce complexity, and improve the user experience by eliminating stacks of latency-creating gateway appliances. 

Zscaler was founded in 2007 with a mission to make the cloud a safe place to do business and a more enjoyable experience for enterprise users. Zscaler’s purpose-built security platform puts a company’s defenses and controls where the connections occur—the internet—so that every connection is fast and secure, no matter how or where users connect or where their applications and workloads reside.

Zscaler enables the world’s leading organizations to securely transform their networks and applications for a mobile and cloud-first world. Applications have moved from the data center to the cloud and users are connecting to their workloads from everywhere, but security has remained anchored to the data center. Zscaler is redefining security by moving it out of the data center and into the cloud.

The Zscaler Zero Trust Exchange uses software-defined business policies, not appliances, to securely connect the right user to the right application, regardless of device, location, or network. Zscaler operates 4 pillars of Trust Exchange. Zscaler Internet Access™ which scans every byte of traffic to ensure that nothing bad comes in and nothing good leaks out. Zscaler Private Access™ offers authorized users secure and fast access to internal applications hosted in the data center or public clouds—without a VPN. Zscaler Cloud Workload Protection, to identify and remediate risks associated with customer’s cloud infrastructure. Zscaler Workload Segmentation provides micro-segmentation of processes across multiple systems with Machine Learning based policy.

Zscaler services are 100% cloud delivered and offer the simplicity, enhanced security, and improved user experience that traditional appliances or hybrid solutions are unable to match. Used in more than 185 countries, the Zscaler multi-tenant, distributed security cloud protects thousands of customers from cyberattacks and data loss, enabling customers to embrace the agility, speed, and cost containment of the cloud—securely.

** US Citizenship Required ** due to the nature of the project.

Job Description

• Identify emerging threats by leveraging Zscaler’s existing data mining tools as well as our cloud based infrastructure to protect our customers
• Develop unique tools and utilizing them to automate the process of identifying threats
• Articulate findings of our customers through blogging, media interviews and speaking engagements with strong writing/speaking skills and be comfortable presenting findings to both internal and external audiences
• Exercise strong technical knowledge of web-based threats, and live to identify the next attack vector, no matter how deep it’s hidden

Qualifications

• Required 3+ years of security research experience 
• Must have experience in the following areas: Windows Malware Reversing, experience working on Sandbox product for malware analysis, and Malware Research experience
• Proven track record of innovative ideas and an ability to implement them
• Strong understanding of the HTTP protocol and web application security
• Strong scripting skills in Perl and Python
• Strong writing skills and examples of past blogs, whitepapers, etc.
• Data mining experience with large security data sets such as IDS, IPS and firewall logs
• Bachelor’s or graduate degree from four-year college or university (preferably in Computer Science, Engineering, or a related discipline), or equivalent security industry work experience

Preferred:

• Experience with threats to mobile devices
• Publication of past research and/or speaking engagements
• Experience writing IDS/IPS signatures

Additional Information

The base salary range for this full-time position is $107,250 to $165,000 + bonus + equity + benefits.

Zscaler’s salary ranges are benchmarked and are determined by role and level. The range displayed on each job posting reflects the minimum and maximum target for new hire salari