Job brief: Senior Staff Security Researcher

What JoRoute checked · Checked by JoRoute

• Listed on Zscaler's own job board. JoRoute does not take listings from job ads or recruiters.
• First seen by JoRoute 2026-11-14 (today); last confirmed on the board 2026-11-14.
• The apply link opens job-boards.greenhouse.io, the address Zscaler's board gives for this job.
• No other listing with this title and place on this board in the last 90 days.
• No layoff notices (WARN) under this name in the state files JoRoute reads.

What the listing says · Employer's own words, not checked

• Pay: $180,000 to $225,000 a year
• Job type: Not stated
• Where: Remote · Remote - USA; Santa Clara, California, USA · Office - Santa Clara, USA
• Posted: 2026-11-13

What the job asks · Employer's own words, not checked

Level: Lead / staff. The title says "Staff".

Must have

• Define necessary telemetry fields and contextual requirements for analyst-grade investigations while ensuring the content layer reliably surfaces required data across all detectio…
• 10+ years of dedicated experience in security engineering, detection engineering, threat hunting, or threat research within an enterprise SOC, MDR provider, or security vendor
• The range displayed on each job posting reflects the minimum and maximum target for new hire salaries for the position across all US locations and could be higher or lower based o…

Conditions

• We are seeking a Senior Staff Security Researcher to join our Agentic Security Operations Center (SOC) Content-Layer Research team in a remote position within the United States (w…
• In-office perks, and more!
• Learn more about Zscaler's hybrid working model and benefits here .

Main duties

• Monitor, inspect, and evaluate agentic incidents and investigations across customer environments, performing root-cause analysis across source alerts, data p…
• Define necessary telemetry fields and contextual requirements for analyst-grade investigations while ensuring the content layer reliably surfaces required da…
• Research, analyze, and onboard end-to-end telemetry from emerging security vendor APIs and log schemas, mapping them seamlessly into a unified security data …
• Architect telemetry normalization, multi-source correlation, and governance frameworks to maintain strict data integrity and consistency across hundreds of v…
• Design, implement, and benchmark incident rules and triage logic to eliminate false positives and validate the precision of alert grouping

Lines copied from the posting, not rewritten. "Preferred" or "nice to have" items are not listed as must-haves.

How it compares · Compared by JoRoute from listings

• Across Zscaler's 164 open listings, 32% of those with a posting date were first posted more than 60 days ago. How Zscaler hires

What nobody outside the employer knows · Not known

• Whether the role is already filled or on hold: employers often leave listings up.
• How many people applied, and who reads the applications.
• Where in the published range an offer would land.

Ask before you apply

1. Is the role fully remote, and from which states can I work?
2. What are the interview steps, and when should I expect to hear back?

Share this brief

Send it to someone whose opinion you trust. They can open it without an account, and nothing about you is in the link.

Email itText it

To keep a copy, use your browser's Print or Share button.

Next steps

Apply on the employer's page Full listingDoes my CV fit?Practise the interviewShould I apply?

Got a message about this job asking for money or documents? Check the message first.

Keep looking

• All 164 open Zscaler jobs, and how Zscaler hires.
• Saw a job somewhere else? Check if the employer still lists it.
• Search every job JoRoute reads from employers' own job boards. No account needed.