Zscaler (NASDAQ: ZS) accelerates digital transformation so customers can be more agile, efficient, resilient, and secure. The Zscaler Zero Trust Exchange platform protects thousands of customers from cyberattacks and data loss by securely connecting users, devices, and applications in any location. Distributed across 200+ public data centers globally and thousands of private sites at the edge, the SASE-based Zero Trust Exchange is the world’s largest in-line cloud security platform.
We believe the future of work is Human + AI and are building an AI-native enterprise where human potential is amplified by machine intelligence to solve the world’s hardest security challenges. Driven by deep customer obsession, we are committed to the mission, outcome, and to each other. We bring these commitments to life through three core behaviors: ownership and collaboration, trust through outcomes and impact, and a challenge culture with ongoing feedback. Ready to make an impact at the company pioneering security transformation in the AI era? Join us at Zscaler.
Role
We are looking for a Security Architect / Security Engineer to join our team. This is a Remote-USA role, reporting to the VP, Information Security Engineering in the Exposure Management & Security Operations department. We’re looking for a hands-on Security Architect / Security Engineer to design, build, and operationalize security capabilities across Agentic AI and Cloud Security. This is an implementation-focused role for someone who can ship production-grade security controls, develop secure reference architectures, and drive response and remediation for security issues across AI systems and cloud-native environments.
What you’ll do (Role Expectations)
- Build secure agent runtimes, reusable libraries, reference implementations, and validation pipelines for agentic AI applications and workflows
- Implement secure agent patterns including planner/executor flows, tool routing, structured outputs, memory/state controls, and RAG trust boundaries
- Design and implement security controls for cloud-native environments across AWS, Azure, and GCP, including IAM, workload protection, and logging
- Partner with platform and engineering teams to embed secure-by-default cloud controls into shared services and developer workflows
- Lead incident response, triage, and remediation workflows for cloud platforms and AI systems in partnership with SOC and engineering teams
Who You Are (Success Profile)
- You are a pragmatic builder who is obsessed with creating, iterating, and shipping secure reference architectures, balancing technical excellence with rapid, hands-on value delivery.
- You thrive in ambiguity and feel comfortable designing secure paths for cutting-edge technologies like Agentic AI where standards are still evolving.
- You are driven by innovation, bringing deep curiosity and technical engineering fundamentals to solve complex, novel security challenges in cloud and AI environments.
- You act like an owner with a strong bias for action, navigating seamlessly between high-level cloud security strategy and deep, hands-on control implementation.
- You are resilient and adaptable, maintaining composure and focus during critical incident response activities to guide cross-functional teams toward swift remediation.
What We’re Looking for (Minimum Qualifications)
- Foundational understanding of AI/ML technologies and experience leveraging, securing, or positioning AI-driven solutions to optimize outcomes within your functional domain
- 7+ years of experience in security engineering, cloud security, application security, or platform security with direct implementation ownership
- Strong coding skills with experience delivering production systems, with Python, TypeScript, or Node preferred
- Hands-on experience with agentic AI systems, including tool/function calling, multi-step planning, RAG, memory/state management, and orchestration
- Strong cloud security experience in AWS, Azure, and/or GCP, including IAM, logging/monitoring, workload protection, Kubernetes, and IaC security
- Practical experience in incident response, including investigation, coordination, and remediation utilizing SIEM, SOAR, EDR, CSPM, or CNAPP tools
What Will Make You Stand Out (Preferred Qualifications)
- Proven ability to leverage AI technologies and workflows to drive measurable operational efficiency
- Familiarity with OWASP LLM Top 10, MITRE ATLAS, NIST AI RMF, and modern cloud security frameworks
- Experience building red-team style testing or evaluation harnesses for LLM applications and agentic systems
- 10+ years of experience in security engineering, cloud security, application security, or platform security with direct implementation ownership
#LI-CM3 #LI-Remote
Zscaler’s salary ranges are benchmarked and are determined by role and level. The range displayed on each job posting reflects the minimum and maximum target for new hire salaries for the position across all US locations and could be higher or lower based on a multitude of factors, including job-related skills, experience, and relevant education or training.
The base salary range listed for this full-time position excludes commission/ bonus/ equity (if applicable) + benefits.
At Zscaler, we are committed to building a team that reflects the communities we serve and the customers we work with. We foster an inclusive environment that values all backgrounds and perspectives, emphasizing collaboration and belonging. Join us in our mission to make doing business seamless and secure.
Our Benefits program is one of the most important ways we support our employees. Zscaler proudly offers comprehensive and inclusive benefits to meet the diverse needs of our employees and their families throughout their life stages, including:
- Various health plans
- Time off plans for vacation and sick time
- Parental leave options
- Retirement options
- Education reimbursement
- In-office perks, and more!
Learn more about Zscaler's hybrid working model and benefits here.
By applying for this role, you adhere to applicable laws, regulations, and Zscaler policies, including those related to security and privacy standards and guidelines.
Zscaler is committed to providing equal employment opportunities to all individuals. We strive to create a workplace where employees are treated with respect and have the chance to succeed. All qualified applicants will be considered for employment without regard to race, color, religion, sex (including pregnancy or related medical conditions), age, national origin, sexual orientation, gender identity or expression, genetic information, disability status, protected veteran status, or any other characteristic protected by federal, state, or local laws. See more information by clicking on the Know Your Rights: Workplace Discrimination is Illegal link.
Pay Transparency
Zscaler complies with all applicable federal, state, and local pay transparency rules.
Zscaler is committed to providing reasonable support (called accommodations or adjustments) in our recruiting processes for candidates who are differently abled, have long term conditions, mental health conditions or sincerely held religious beliefs, or who are neurodivergent or require pregnancy-related support.
Skills Required
- Extensive experience designing and implementing agent runtimes including planning, tool calling, and memory/state controls
- 8+ years of experience shipping production security engineering solutions with strong coding skills in Python, TypeScript, or Node
- Practical experience integrating frontier model APIs with structured outputs, streaming, and safety controls
- Familiarity with agent frameworks such as LangGraph, LangChain, or Semantic Kernel and the ability to extend them securely
- Solid experience in cloud security for AWS, GCP, or Azure along with Kubernetes security and Infrastructure as Code
Zscaler Compensation & Benefits Highlights
-
Healthcare Strength — Health, dental and vision plans through major carriers, alongside mental-health services, virtual care, and fertility resources, create broad coverage. Feedback suggests coverage breadth and provider choice are seen as strong points.
-
Parental & Family Support — Paid parental bonding leave for birthing and non-birthing parents, plus additional disability leave and a phased return option, signals meaningful family support. Feedback suggests these policies contribute to a family-friendly package.
-
Equity Value & Accessibility — An ESPP with at least a 15% discount and RSUs for eligible roles add wealth-building potential beyond base pay. Feedback suggests stock programs are a notable strength of the total rewards mix.
Zscaler Insights
What We Do
Zscaler accelerates digital transformation so our customers can be more agile, efficient, resilient, and secure. Our cloud native Zero Trust Exchange platform protects thousands of customers from cyberattacks and data loss by securely connecting users, devices, and applications in any location.
Why Work With Us
Our impact comes from how we work—every day, in every decision, as one team. Our values and leadership principles are more than words; they're our operating system. They fuel a culture of execution where trust, transparency, and accountability help us deliver meaningful results for our customers, colleagues, and our company. www.zscaler.com/culture
Gallery
.jpg)
Zscaler Offices
Hybrid Workspace
Employees engage in a combination of remote and on-site work.
Zscaler's hybrid work environment balances individual employee work styles with best practices to build trust and collaboration – all in support of addressing personal productivity and achieving organizational success.
