SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 96,600 - 138,000 / annual
Zscaler is seeking a Detection Analyst to join the Detection Operations Team in a fully remote role (US-based). You will analyze EDR telemetry, alerts, and log sources across multiple detection domains—Endpoint, Identity, Network, and Cloud/SaaS—to identify and publish threats for Managed Detection and Response customers.
In this role, you will:
- Analyze EDR telemetry, alerts, and log sources across Endpoint, Identity, Network, and Cloud/SaaS detection domains
- Publish threats for customers using clear, concise communication that conveys key indicators and remediation context
- Drive workflow improvements through orchestration and automation to manage high volumes of telemetry
Zscaler's Zero Trust Exchange platform protects thousands of customers from cyberattacks and data loss by securely connecting users, devices, and applications. The company is building an AI-native enterprise where human potential is amplified by machine intelligence to solve complex security challenges.
You should be a high-trust collaborator with a growth mindset, customer obsession, and relentless focus on execution. You are data-driven, leverage analytics to guide decisions, and embrace a challenge culture with candid feedback. The role reports to the Detection Analyst Manager.
REQUIREMENTS:
Minimum Qualifications:
- Demonstrated curiosity and active exploration of AI tools, with proven history of integrating new technologies to enhance workflows and augment problem-solving
- Strong experience in Endpoint (EDR) and one or more functional areas including Cloud/SaaS, Identity, Email, or Network detection domains
- Expertise using query languages and understanding syntax across EDR or other security platforms such as SQL or Lucene
Preferred Qualifications:
- Practical experience applying AI-driven tools or automated workflows to accelerate threat detection and security engineering
- Previous professional experience in a Red Team or offensive security capacity
- Active involvement in the Infosec community through writing blogs, participating in webinars, or presenting at conferences
