Senior Detection Engineer

Zscaler

1d•$119,000 - $140,000•Remote

About The Position

Zscaler accelerates digital transformation so our customers can be more agile, efficient, resilient, and secure. Our cloud native Zero Trust Exchange platform protects thousands of customers from cyberattacks and data loss by securely connecting users, devices, and applications in any location. Here, impact in your role matters more than title and trust is built on results. We believe in transparency and value constructive, honest debate—we’re focused on getting to the best ideas, faster. We build high-performing teams that can make an impact quickly and with high quality. To do this, we are building a culture of execution centered on customer obsession, collaboration, ownership and accountability. We value high-impact, high-accountability with a sense of urgency where you’re enabled to do your best work and embrace your potential. If you’re driven by purpose, thrive on solving complex challenges and want to make a positive difference on a global scale, we invite you to bring your talents to Zscaler and help shape the future of cybersecurity. The Red Canary Detection Engineering team at Zscaler continues to push the boundaries of threat detection and response with a unique combination of operations, threat research, and engineering in tight integration with the development team that designs our analysis platform and the Red Canary Threat Detection Engine. The security landscape is always shifting and introducing new adversaries and our team operates 24/7 to track down threats in endpoint data and deliver fast and practical detections to our customers. We're looking for an experienced Senior Detection Engineer to join our Detection Engineering team. Reporting to the Manager, Detection Engineering, you'll be responsible for:

Requirements

Strong experience in Endpoint (MDR) and one or more of the following functional areas: Cloud/SaaS, Identity, Email or SIEM
Proven experience with automation and orchestration to effectively handle an extreme volume of telemetry and logs in a timely and efficient manner
Strong analytical thought-process and critical thinking skills to translate disparate activity into the realm of threat analysis
Experience using query languages and understanding syntax across EDR or other security platforms (SQL, K, Lucene, etc.)
Experience creating and tuning detectors/rules using commonly known tools such as YARA, SIGMA, Snort, Splunk, Elastic, etc.
Ability to work from Sunday - Wednesday from 5pm MST - 3am MST.

Nice To Haves

You enjoy impacting the Infosec community through writing blogs, participating in webinars, and presenting at conference talks
Experience using version control software for the deployment of detectors, rules, or other automations (GitHub, CircleCi, etc)
Previous Red Team experience

Responsibilities

Using Red Canary’s detection platform to analyze EDR telemetry, alerts, and log sources across several detection domains (Endpoint, Identity, SIEM, Cloud/SaaS, etc.)
Publishing threats for customers using concisely-written communication while effectively conveying key and important indicators
Researching coverage opportunities then creating new detectors, and tune existing ones.
Improving the Detection Engineering workflow through orchestration & automation
Providing mentorship to your peers and communicate effectively with others for efficient cross-team collaboration
Help lead projects to improve the quality of life for both the customer and the CIRT