Detection Analyst

Zscaler•San Jose, WA

5d•Remote

About The Position

Zscaler is seeking a Detection Analyst to join their Detection Operations Team. This is a remote role (USA Only) where the analyst will use an advanced detection platform to analyze EDR telemetry, alerts, and log sources across Endpoint, Identity, Network, and Cloud/SaaS domains. The primary goal is to identify and publish threats for Managed Detection and Response customers. The role also involves driving projects to improve workflow through orchestration and automation, ensuring high-fidelity threat analysis and concise, actionable communication about emerging threats at scale.

Requirements

Demonstrated curiosity and active exploration of AI tools, with a proven history of integrating new technologies to enhance daily workflows and augment problem-solving
Strong experience in Endpoint (EDR) and one or more functional areas including Cloud/SaaS, Identity, Email, or Network detection domains
Expertise using query languages and understanding syntax across EDR or other security platforms such as SQL or Lucene

Nice To Haves

Practical experience applying AI-driven tools or automated workflows to accelerate threat detection and security engineering
Previous professional experience in a Red Team or offensive security capacity
Active involvement in the Infosec community through writing blogs, participating in webinars, or presenting at conferences

Responsibilities

Analyze EDR telemetry, alerts, and log sources across several detection domains including Endpoint, Identity, Network, and Cloud/SaaS
Publish threats for customers using concisely written communication to effectively convey key indicators and remediation context
Improve the Detection Operations workflow through orchestration and automation to manage high volumes of telemetry