Threat Response Engineer (4th Shift)

Zscaler

3d•Remote

About The Position

Zscaler accelerates digital transformation so our customers can be more agile, efficient, resilient, and secure. Our cloud native Zero Trust Exchange platform protects thousands of customers from cyberattacks and data loss by securely connecting users, devices, and applications in any location. Here, impact in your role matters more than title and trust is built on results. We believe in transparency and value constructive, honest debate—we’re focused on getting to the best ideas, faster. We build high-performing teams that can make an impact quickly and with high quality. To do this, we are building a culture of execution centered on customer obsession, collaboration, ownership and accountability. We value high-impact, high-accountability with a sense of urgency where you’re enabled to do your best work and embrace your potential. If you’re driven by purpose, thrive on solving complex challenges and want to make a positive difference on a global scale, we invite you to bring your talents to Zscaler and help shape the future of cybersecurity. The Red Canary Threat Response Engineering team is on the front lines, acting as the virtual boots on the ground for our customers to respond to and remediate threats. You will drive investigations using Endpoint Detection and Response (EDR) and Identity telemetry to perform behavioral analysis and threat hunting while leveraging the Red Canary platform to take immediate action. We aim to maximize efficiency and minimize customer vulnerability by finding innovative uses for existing tools and developing new ones. Our team provides customers with the confidence that any compromises will be fully remediated, allowing them to remain focused on their core business operations. We are looking for an experienced Threat Response Engineer to join our Active Remediation team. This is a remote role, reporting to the Senior Manager, Threat Response Engineering. You will perform investigations into detected threats, using customer security products to analyze, contain, and remediate issues while providing thorough reports. This role requires the ability to work a Wednesday – Saturday 10pm – 8am Mountain Time shift and participate in a 24x7 on-call rotation to ensure our customers remain protected.

Requirements

Strong analytical and problem-solving skills demonstrated through direct experience responding to security events and threats
Experience with Endpoint Detection and Response (EDR) products such as CrowdStrike, Microsoft Defender for Endpoint, SentinelOne, or Palo Alto Cortex
Foundational understanding of internal system functionality for Windows and MacOS operating systems
Experience with or professional familiarity with Identity security products
Professional and articulate communication skills with the ability to provide clear technical documentation

Nice To Haves

Experience with security operations, enterprise technology, and network controls or protocols
Proven interest in developing operational efficiencies via technology or process improvement
Deep interest in staying current with the latest adversary tactics, techniques, and procedures

Responsibilities

Perform investigations into detected threats and leverage security products to analyze, contain, and remediate threats in customer environments
Provide customers with thorough reports of actions taken to ensure clarity on environment cleanup and protection strategies
Identify and implement effective response strategies to further enhance the security posture of the customer base
Collaborate with Detection Engineering, Threat Hunting, Intel, and Product teams to develop innovative methods for timely threat remediation
Prioritize and execute tasks effectively in a fast-paced operational environment while maintaining a 24x7 on-call rotation