Security Architect / Security Engineer

Zscaler (NASDAQ: ZS) accelerates digital transformation so customers can be more agile, efficient, resilient, and secure. The Zscaler Zero Trust Exchange platform protects thousands of customers from cyberattacks and data loss by securely connecting users, devices, and applications in any location. Distributed across 200+ public data centers globally and thousands of private sites at the edge, the SASE-based Zero Trust Exchange is the world’s largest in-line cloud security platform.

We believe the future of work is Human + AI and are building an AI-native enterprise where human potential is amplified by machine intelligence to solve the world’s hardest security challenges. Driven by deep customer obsession, we are committed to the mission, outcome, and to each other. We bring these commitments to life through three core behaviors: ownership and collaboration, trust through outcomes and impact, and a challenge culture with ongoing feedback. Ready to make an impact at the company pioneering security transformation in the AI era? Join us at Zscaler.

Role

We are looking for a Security Architect / Security Engineer to join our team. This is a Remote-USA role, reporting to the VP, Information Security Engineering in the Exposure Management & Security Operations department. We’re looking for a hands-on Security Architect / Security Engineer to design, build, and operationalize security capabilities across Agentic AI and Cloud Security. This is an implementation-focused role for someone who can ship production-grade security controls, develop secure reference architectures, and drive response and remediation for security issues across AI systems and cloud-native environments.

What you’ll do (Role Expectations)

Build secure agent runtimes, reusable libraries, reference implementations, and validation pipelines for agentic AI applications and workflows

Implement secure agent patterns including planner/executor flows, tool routing, structured outputs, memory/state controls, and RAG trust boundaries

Design and implement security controls for cloud-native environments across AWS, Azure, and GCP, including IAM, workload protection, and logging

Partner with platform and engineering teams to embed secure-by-default cloud controls into shared services and developer workflows

Lead incident response, triage, and remediation workflows for cloud platforms and AI systems in partnership with SOC and engineering teams

Who You Are (Success Profile)

You are a pragmatic builder who is obsessed with creating, iterating, and shipping secure reference architectures, balancing technical excellence with rapid, hands-on value delivery.

You thrive in ambiguity and feel comfortable designing secure paths for cutting-edge technologies like Agentic AI where standards are still evolving.

You are driven by innovation, bringing deep curiosity and technical engineering fundamentals to solve complex, novel security challenges in cloud and AI environments.

You act like an owner with a strong bias for action, navigating seamlessly between high-level cloud security strategy and deep, hands-on control implementation.

You are resilient and adaptable, maintaining composure and focus during critical incident response activities to guide cross-functional teams toward swift remediation.

What We’re Looking for (Minimum Qualifications)

Foundational understanding of AI/ML technologies and experience leveraging, securing, or positioning AI-driven solutions to optimize outcomes within your functional domain

7+ years of experience in security engineering, cloud security, application security, or platform security with direct implementation ownership

Strong coding skills with experience delivering production systems, with Python, TypeScript, or Node preferred

Hands-on experience with agentic AI systems, including tool/function calling, multi-step planning, RAG, memory/state management, and orchestration

Strong cloud security experience in AWS, Azure, and/or GCP, including IAM, logging/monitoring, workload protection, Kubernetes, and IaC security

Practical experience in incident response, including investigation, coordination, and remediation utilizing SIEM, SOAR, EDR, CSPM, or CNAPP tools

What Will Make You Stand Out (Preferred Qualifications)

Proven ability to leverage AI technologies and workflows to drive measurable operational efficiency

Familiarity with OWASP LLM Top 10, MITRE ATLAS, NIST AI RMF, and modern cloud security frameworks

Experience building red-team style testing or evaluation harnesses for LLM applications and agentic systems

10+ years of experience in security engineering, cloud security, application security, or platform security with direct implementation ownership

#LI-CM3 #LI-Remote

Zscaler’s salary ranges are benchmarked and are determined by role and level. The range displayed on each job posting reflects the minimum and maximum target for new hire salaries for the position across all US locations and could be higher or lower based on a multitude of factors, including job-related skills, experience, and relevant education or training.

The base salary range listed for this full-time position excludes commission/ bonus/ equity (if applicable) + benefits.

Base Pay Range

$164,500 — $235,000 USD

At Zscaler, we are committed to building a team that reflects the communities we serve and the customers we work with. We foster an inclusive environment that values all backgrounds and perspectives, emphasizing collaboration and belonging. Join us in our mission to make doing business seamless and secure.

Our Benefits program is one of the most important ways we support our employees. Zscaler proudly offers comprehensive and inclusive benefits to meet the diverse needs of our employees and their families throughout their life stages, including:

Various health plans

Time off plans for vacation and sick time

Parental leave options

Retirement options

Education reimbursement

In-office perks, and more!

Learn more about Zscaler's hybrid working model and benefits here .

By applying for this role, you adhere to applicable laws, regulations, and Zscaler policies, including those related to security and privacy standards and guidelines.

Zscaler is committed to providing equal employment opportunities to all individuals. We strive to create a workplace where employees are treated with respect and have the chance to succeed. All qualified applicants will be considered for employment without regard to race, color, religion, sex (including pregnancy or related medical conditions), age, national origin, sexual orientation, gender identity or expression, genetic information, disability status, protected veteran status, or any other characteristic protected by federal, state, or local laws. See more information by clicking on the Know Your Rights: Workplace Discrimination is Illegal link.

Pay Transparency

Zscaler complies with all applicable federal, state, and local pay transparency rules.

Zscaler is committed to providing reasonable support (called accommodations or adjustments) in our recruiting processes for candidates who are differently abled, have long term conditions, mental health conditions or sincerely held religious beliefs, or who are neurodivergent or require pregnancy-related support.