Senior Cloud Threat Researcher

You will join our Zscaler Data Security Posture Management (DSPM) team, as a Senior Cloud threat researcher, you will be part of the wider cloud threat research team predominantly focused on cloud threat detection research. Your daily responsibility would be to research cloud services across AWS, Azure, GCP and OCI to understand the security risks associated with each of these services. You will be reporting to Principal Product Manager, to the Product Management team at Bangalore Location.

You will be responsible for:

• Research how multiple cloud services might be adopted and potential exploitation tactics that can be used by threat actors, establish a threat model for each of these services.
• You will build detection use cases, document each use case define data sources such as CSP metadata properties or event patterns.
• Build a CTI backend which covers intelligence collection, enrichment tagging and dispersion of data across ip, domains, file hashes etc.
• As a senior member of the team, you are expected to be an SME and help the engineering teams create the correct data collection & detection content. You are also expected to ensure QA of the detection content and ensure low false positives.

What We're Looking for (Minimum Qualifications)

• Experience with GCP, AWS and Azure with grasp of at least GCP and AWS preferred.
• Experience with Cloud IAM, Networking, Databases, Data lakes and general cloud architecture – Relevant CSP certifications.
• Experience with MITRE ATT&CK Enterprise Matrix and how it applies to cloud environments, understanding data sources and TTP's for detections.
• Experience with cyber risk, risk prioritization methodologies and security frameworks.
• Security Operations experience in Threat Hunting, Intelligence gathering, red teaming.
• Working with security data lakes like SIEM's, Bigdata platforms like Snowflake or Databricks.
• Previous knowledge of Cloud Security Posture Management (CSPM), Kubernetes Security Posture Management (KSPM), DevSecOps and Infrastructure as Code (IaC)
• Programming skills in Python, Go, Snowflake, SQL, Logica, API's, JSON, YAML

What Will Make You Stand Out (Preferred Qualifications)

• 3+ years of experience with vulnerability research, application security research such as OWASP Top 10
• Previous experience in writing security publications, blogs analysis of attack campaigns
• General DevOps & Agile skillset – Git, JIRA, CI/CD etc

At Zscaler, we believe that diversity drives innovation, productivity, and success. We are looking for individuals from all backgrounds and identities to join our team and contribute to our mission to make doing business seamless and secure. We are guided by these principles as we create a representative and impactful team, and a culture where everyone belongs. For more information on our commitments to DEIB, visit the Corporate Responsibility page of our website. Our Benefits program is one of the most important ways we support our employees. Zscaler proudly offers comprehensive and inclusive benefits to meet the diverse needs of our employees and their families throughout their life stages, including:

• Multiple health plans
• A flexible time off policy
• Hybrid Working Model
• Parental leave options
• Retirement options
• Education reimbursement
• In-office perks, and more!

#LI-Hybrid

#LI-RG

•

Last updated on Aug 21, 2024