Staff IT Security Engineer, Corporate Infrastructure

Our general and administrative teams help to support and scale our great company. Whether striving to grow our workforce, nurture an amazing culture and work environment, support our financial and legal operations, or maintain our global infrastructure, the G&A team provides a strong foundation for growth. Put your passion, drive and expertise to work with the world's cloud security leader.

We're looking for an experienced Staff Security Engineer to join our IT Infrastructure team. This role is remote and will report to the Manager of IT Security. You'll be responsible of: 

• Develop, implement, maintain, monitor, and support enterprise IT security best practices across networks, applications, cloud infrastructure, and endpoint devices.  
• Collaborate with Zscaler product teams to configure, maintain, and support corporate instances, ensuring up-to-date security parameters, implementations, and best practices.  
• Assist Security teams in scripting and automating repetitive tasks related to policy creation, incident response, and alert handling.  
•  Implement zero trust solutions focusing on user-to-application traffic, workload-to-workload traffic (on-premises/cloud), posture checking, and active detection across networks and endpoints.  
• Deploy and manage cloud (CSPM) and data security (DSPM) policies, collaborate with environment owners for remediation, and optimize DLP alerts in coordination with security teams to improve operational efficiency.

Minimum Qualifications:

• 7+ years of experience in IT security or related field
• Experience with zero trust solutions (ideally Zscaler Internet Access and/or Private Access, but not required) and technologies, such as identify verification, role-based access control, network segmentation, and posture checking
• Deep understanding of cloud architecture and cloud security challenges and solutions, as well as operating systems (Windows/MacOS/Linux), networking, access control, and authentication
• Proven experience in scripting to automate complex IT problems (language flexible), including DevOps workflow familiarity (code sanity, change control)
• Excellent reporting and analytical skills (Excel, Sheets, etc.)

Preferred Qualifications: 

• Experience with security appliances & applications, primarily hands-on configuration of SSL/TLS inspection, content filtering, firewall rules, DLP, vulnerability & threat detection, endpoint security, access management, etc.
• Experience with log streaming configuration, analysis, event correlation, and false positive reduction
• Network troubleshooting experience - Familiarity with tools such as ping, traceroute, MTR, and network protocol analyzers, such as tcpdump and Wireshark

#LI-IA1 #LI-Remote