Senior Principal Engineer, Insider Threat

About Zscaler

Serving thousands of enterprise customers around the world including 40% of Fortune 500 companies, Zscaler (NASDAQ: ZS) was founded in 2007 with a mission to make the cloud a safe place to do business and a more enjoyable experience for enterprise users. As the operator of the world’s largest security cloud, Zscaler accelerates digital transformation so enterprises can be more agile, efficient, resilient, and secure. The pioneering, AI-powered Zscaler Zero Trust Exchange™ platform, which is found in our SASE and SSE offerings, protects thousands of enterprise customers from cyberattacks and data loss by securely connecting users, devices, and applications in any location.

Named a Best Workplace in Technology by Fortune and others, Zscaler fosters an inclusive and supportive culture that is home to some of the brightest minds in the industry. If you thrive in an environment that is fast-paced and collaborative, and you are passionate about building and innovating for the greater good, come make your next move with Zscaler. 

Our Engineering team built the world’s largest cloud security platform from the ground up, and we keep building. With more than 100 patents and big plans for enhancing services and increasing our global footprint, the team has made us and our multitenant architecture today's cloud security leader, with more than 15 million users in 185 countries. Bring your vision and passion to our team of cloud architects, software engineers, security experts, and more who are enabling organizations worldwide to harness speed and agility with a cloud-first strategy.

We are seeking a Senior Principal Engineer, Insider Threat to join our dynamic and fast-paced team. In this role you will play a key role in safeguarding our organization's sensitive data and reputation through designing, implementing, and optimizing a comprehensive insider threat program. You will be reporting to the VP, Corporate CISO, working as an individual contributor you will:

• Establish and maintain a comprehensive insider threat program aligned with organizational goals and regulatory requirements, while conducting risk assessments to identify and mitigate vulnerabilities and data exfiltration risks
• Implement and optimize detection procedures using technologies like DLP and UEBA to identify insider threats, while collaborating with Zscaler product teams to enhance offerings and strengthen corporate security posture
• Lead incident response for high-severity insider threats, ensuring effective containment and conducting thorough post-incident analysis to identify lessons learned and drive continuous improvement
• Establish metrics to measure program effectiveness, such as detection rates and response times, while designing and delivering training programs to educate employees on identifying and reporting insider threats
• Communicate complex cybersecurity topics to non-technical stakeholders, including executive leadership, to ensure alignment and understanding of key security initiatives

What We're Looking for (Minimum Qualifications)

• 10+ years of experience in information security, 8+ years' experience leading projects
• Experience with improving and accelerating detection of potential insider risk
• Experience coordinating with local, state, or federal law enforcement agencies to investigate incidents
• Proven experience in developing and implementing incident response plans compliant with FedRAMP and DoD IL5 standards, including familiarity with NIST 800-53, 800-61, and other relevant frameworks
• Prior law enforcement or military experience, with experience proactively sharing intelligence with Intelligence Agencies, and must have an Active U.S. Top Secret clearance

What Will Make You Stand Out (Preferred Qualifications)

• Proven expertise with top global Cloud Service Providers (CSP), SOC operations, and security analytics, paired with cybersecurity certifications like CISSP
• Experience integrating commercial solutions for corporate use and contributing to product feature development

#LI-JM1

#LI-Remote

Zscaler’s salary ranges are benchmarked and are determined by role and level. The range displayed on each job posting reflects the minimum and maximum target for new hire salaries for the position across all US locations and could be higher or lower based on a multitude of factors, including job-related skills, experience, and relevant education or training.

The base salary range listed for this full-time position excludes commission/ bonus/ equity (if applicable) + benefits.

Base Pay Range$175,000—$250,000 USD

At Zscaler, we believe that diversity drives innovation, productivity, and success. We are looking for ind