Key skills
Endpoint Detection and Response (EDR)CrowdStrikeMicrosoft Defender for EndpointSentinelOneCarbonBlackIdentity security technologiesWindows operating systemMacOS operating systemAI tools integrationSecurity event responseSecurity threat responseAICommunication
About this role
Zscaler is an AI-forward enterprise focused on digital transformation and cybersecurity. They are seeking a Threat Response Engineer to investigate and respond to security threats, ensuring customer environments are secure and protected.
Responsibilities:
- Perform investigations into detected threats and leverage security products to analyze, contain, and remediate threats in customer environments
- Provide customers with thorough reports of actions taken to ensure clarity on environment cleanup and protection strategies
- Identify and implement effective response strategies to further enhance the security posture of the customer base
- Collaborate with Detection Engineering, Threat Hunting, Intel, and Product teams to develop innovative methods for timely threat remediation
- Prioritize and execute tasks effectively in a fast-paced operational environment while participating a 24x7 on-call rotation
Requirements:
- Strong analytical and problem-solving skills demonstrated through direct experience responding to security events and threats
- Experience with Endpoint Detection and Response (EDR) products including CrowdStrike, Microsoft Defender for Endpoint, SentinelOne, or CarbonBlack and familiarity with Identity security technologies
- Foundational understanding of internal system functionality for Windows and MacOS operating systems
- Demonstrated curiosity and active exploration of AI tools, with a proven history of integrating new technologies to enhance daily workflows and augment problem-solving
- Professional and articulate communication skills with the ability to provide clear technical documentation
- Ability to work Monday - Friday 10:00am - 6:00pm MT and ability to participate in a recurring, monthly on-call rotation
- Experience with security operations, enterprise technology, and network controls or protocols
- Experience utilizing AI-augmented development platforms to drive security automation, with a demonstrated capability to proactively refine or engineer new AI-based solutions that enhance operational velocity and tool efficacy
- Deep interest in staying current with the latest adversary tactics, techniques, and procedures