Security Architect / Security Engineer

Zscaler

1d•$164,500 - $235,000•Remote

About The Position

Zscaler is seeking a hands-on Security Architect / Security Engineer for a Remote-USA role in the Exposure Management & Security Operations department. The role reports to the VP, Information Security Engineering and focuses on designing, building, and operationalizing security capabilities across agentic AI and cloud security. This is an implementation-focused position responsible for production-grade security controls, secure reference architectures, and response and remediation for security issues across AI systems and cloud-native environments. The position builds secure agent runtimes, reusable libraries, reference implementations, and validation pipelines for agentic AI applications and workflows. It also designs and implements cloud-native security controls across AWS, Azure, and GCP, and partners with platform and engineering teams to embed secure-by-default controls into shared services and developer workflows. The role leads incident response, triage, and remediation for cloud platforms and AI systems in partnership with SOC and engineering teams. The successful candidate is a pragmatic, hands-on builder who can work amid ambiguity, balance security strategy with implementation, and guide cross-functional teams through incident response. Zscaler describes its workplace as inclusive and collaborative and offers comprehensive benefits to employees and their families.

Requirements

Foundational understanding of AI/ML technologies and experience leveraging, securing, or positioning AI-driven solutions to optimize outcomes within a functional domain.
At least 7 years of experience in security engineering, cloud security, application security, or platform security with direct implementation ownership.
Strong coding skills and experience delivering production systems; Python, TypeScript, or Node preferred.
Hands-on experience with agentic AI systems, including tool/function calling, multi-step planning, RAG, memory/state management, and orchestration.
Strong cloud security experience in AWS, Azure, and/or GCP, including IAM, logging/monitoring, workload protection, Kubernetes, and IaC security.
Practical incident response experience, including investigation, coordination, and remediation using SIEM, SOAR, EDR, CSPM, or CNAPP tools.

Nice To Haves

Proven ability to leverage AI technologies and workflows to drive measurable operational efficiency.
Familiarity with OWASP LLM Top 10, MITRE ATLAS, NIST AI RMF, and modern cloud security frameworks.
Experience building red-team-style testing or evaluation harnesses for LLM applications and agentic systems.
At least 10 years of experience in security engineering, cloud security, application security, or platform security with direct implementation ownership.

Responsibilities

Build secure agent runtimes, reusable libraries, reference implementations, and validation pipelines for agentic AI applications and workflows.
Implement secure agent patterns, including planner/executor flows, tool routing, structured outputs, memory/state controls, and RAG trust boundaries.
Design and implement security controls for cloud-native environments across AWS, Azure, and GCP, including IAM, workload protection, and logging.
Partner with platform and engineering teams to embed secure-by-default cloud controls into shared services and developer workflows.
Lead incident response, triage, and remediation workflows for cloud platforms and AI systems in partnership with SOC and engineering teams.