Senior IT Security Operations Engineer

Zscaler is a cloud security company providing the Zero Trust Exchange platform to protect customers from cyberattacks and data loss. The Senior IT Security Operations Engineer will operate and maintain security platforms, tune zero trust, CSPM, DSPM, and DLP policies, monitor user and application experiences, and support incident response and workflow automation.

Responsibilities:

• Provide day-to-day operational support, configuration, policy tuning, and platform health monitoring for ZIA, ZPA, ZDX, AI Security, and Cloud Security
• Configure and maintain zero trust policies covering user-to-application access, posture checking, SSL/TLS inspection, content filtering, and access control
• Deploy and tune Cloud Security Posture Management (CSPM) and Data Security Posture Management (DSPM) policies, collaborating with environment owners on remediation
• Utilize ZDX to monitor application and user experience issues, correlating findings with network and security telemetry to identify root causes
• Support DLP policy tuning, alert triage, SOP documentation, and on-call incident response while helping automate repetitive workflows

Requirements:

• • Demonstrated curiosity and active exploration of AI tools, with a proven history of integrating new technologies to enhance daily workflows and augment problem-solving
• • U.S. Citizenship required due to specific customer security requirements
• • 5+ years of experience in IT security operations, network security, or a related technical domain
• • Hands-on experience administering Zscaler ZIA and/or ZPA security platforms
• • Working knowledge of zero trust concepts, including identity verification, role-based access control, network segmentation, and posture checking
• • Practical understanding of cloud architecture (AWS, Azure, GCP), OS fundamentals (Windows, macOS, Linux), networking concepts, and authentication protocols
• • Hands-on configuration experience with SSL/TLS inspection, DLP, SIEM integration, log streaming (NSS), and EDR platforms such as CrowdStrike Falcon
• • Strong network troubleshooting skills utilizing tools like tcpdump, Wireshark, ping, and traceroute/MTR alongside familiarity with DevSecOps workflows
• • Active technical certifications such as Zscaler ZCCA/ZCCP, CrowdStrike CCFA/CCFR, Security+, or CISSP