Insider Risk Security Engineer
Zscaler · Remote - USA
About the role
A senior contributor on the Insider Risk programme in Zscaler's Enterprise Security department, reporting to the Senior Architect and taking direction from the Insider Risk Team Lead. The engineer tunes detection rules, investigates endpoint and user activity with EDR/XDR, UEBA and SIEM tools, develops investigation playbooks, mentors junior analysts, and works with HR and Legal on active cases.
The company wants six or more years in insider risk, data protection, fraud investigation or security operations, experience dispositioning SIEM or SOAR alerts, Python or JavaScript automation, and US citizenship. GCFA or GCFE certifications are pluses. Remote in the United States.