Sr. Threat Researcher (Threat Hunting/Deception/MITRE ATT&CK)

About Zscaler Zscaler is a pioneer and global leader in zero trust security. The world’s largest businesses, critical infrastructure organizations, and government agencies rely on Zscaler to secure users, branches, applications, data & devices, and to accelerate digital transformation initiatives. Distributed across more than 160 data centers globally, the Zscaler Zero Trust Exchange platform combined with advanced AI combats billions of cyber threats and policy violations every day and unlocks productivity gains for modern enterprises by reducing costs and complexity.

Here, impact in your role matters more than title and trust is built on results. We believe in transparency and value constructive, honest debate —we’re focused on getting to the best ideas, faster. We build high-performing teams that can make an impact quickly and with high quality. To do this, we are building a culture of execution centered on customer obsession, collaboration, ownership and accountability.

We champion an “AI Forward, People First” philosophy to help us accelerate and innovate, empowering our people to embrace their potential. If you’re driven by purpose, thrive on solving complex challenges and want to make a positive difference on a global scale, we invite you to bring your talents to Zscaler to help shape the future of cybersecurity.

Role We are looking for a Senior Threat Researcher to join our Engineering team on a hybrid basis in Bangalore, reporting to the Director, Software Development Engineering.

You will contribute as a Threat researcher within our Engineering team, helping to build and enhance the world’s largest cloud security platform. You will bring your vision and passion to a team of experts enabling organizations worldwide to harness speed and agility through a cloud-first strategy.

What You’ll Do (Role Expectations)

• Drive the end-to-end detection lifecycle by researching emerging threats and TTPs to build refined, multi-platform detections while optimizing the Threat Detection Efficacy Matrix
• Drive detection excellence by using adversary emulation to identify gaps and collaborating with cross-functional teams to test, validate, and enhance security controls
• Design and operationalize new deception use cases such as deception for AI infrastructure
• Turn deception telemetry into actionable detections and automated response playbooks
• Build ML pipelines that enrich deception signals (context, asset criticality, identity risk, kill-chain stage) and score events to auto-prioritize high-risk alerts

Who You Are (Success Profile)

• You thrive in ambiguity. You're comfortable building the path as you walk it. You thrive in a dynamic environment, seeing ambiguity not as a hindrance, but as the raw material to build something meaningful
• You are a problem-solver. You seek out challenges because you are energized by finding solutions, knowing that solving the hard problems delivers the biggest impact
• You are a learner. You have a true growth mindset and never stop developing yourself, actively seeking feedback to become a better partner and a stronger teammate. You love what you do and you do it with purpose
• You are a positive force. You approach hard problems with constructive energy and a 'can-do' spirit that is contagious, inspiring your team to stay focused on the solution
• You are driven by innovation. You have a deep curiosity for how things work and are energized by solving complex technical challenges. You believe in the power of technology to accelerate transformation and are always looking for a better, more secure, and scalable way

What We’re Looking For (Minimum Qualifications)

• 5+ years in Threat Research, Detection Engineering, or Threat Intelligence
• Strong understanding of adversary behaviors, attack chains, and MITRE ATT&CK
• Hands-on experience with SIEM, EDR/XDR, log analysis, and scripting (Python/PowerShell)
• Ability to translate research into actionable detections and measurable metrics
• Knowledge of red team emulation frameworks and detection bypass techniques

What Will Make You Stand Out (Preferred Qualifications)

• Practical experience with deception technologies: Honeypots, honeytokens/canary tokens, decoy identities, and trap services
• Applying deception in cloud and Kubernetes environments to detect lateral movement and credential theft
• Understanding of AI/ML infrastructure and threats

At Zscaler, we are committed to building a team that reflects the communities we serve and the customers we work with. We foster an inclusive environment that values all backgrounds and perspectives, emphasizing collaboration and belonging. Join us in our mission to make doing business seamless and secure.

Benefits Our Benefits program is one of the most important ways we support our employees. Zscaler proudly offers comprehensive and inclusive benefits to meet the diverse needs of our employees and their families throughout their life stages, including:

• Various health plans
• Time off plans for vacation and sick time
• Parental leave options
• Retirement options
• Education reimbursement
• In-office perks, and more!

Learn more about Zscaler’s Future of Work strategy, hybrid working model, and benefits here.

By applying for this role, you adhere to applicable laws, regulations, and Zscaler policies, including those related to security and privacy standards and guidelines.

Zscaler is committed to providing equal employment opportunities to all individuals. We strive to create a workplace where employees are treated with respect and have the chance to succeed. All qualified applicants will be considered for employment without regard to race, color, religion, sex (including pregnancy or related medical conditions), age, national origin, sexual orientation, gender identity or expression, genetic information, disability status, protected veteran status, or any other characteristic protected by federal, state, or local laws. See more information by clicking on the Know Your Rights: Workplace Discrimination is Illegal link. Pay Transparency

Zscaler complies with all applicable federal, state, and local pay transparency rules.

Zscaler is committed to providing reasonable support (called accommodations or adjustments) in our recruiting processes for candidates who are differently abled, have long term conditions, mental health conditions or sincerely held religious beliefs, or who are neurodivergent or require pregnancy-related support.