Threat Response Engineer (TRE) - Day Shift (10am-6pm MT)

About this role

Zscaler is hiring a Threat Response Engineer to investigate and remediate confirmed security threats on customer endpoints through their Active Remediation MDR service. You'll analyze compromises, contain threats, and document remediation strategies while collaborating with detection and threat intelligence teams in a fast-paced security operations environment.

What you'll do

• Investigate detected threats and use security tools to analyze, contain, and remediate threats in customer environments
• Generate detailed reports documenting actions taken, cleanup status, and protection recommendations for customers
• Develop and implement response strategies to improve customer security posture
• Collaborate with Detection Engineering, Threat Hunting, and Product teams on innovative remediation methods
• Execute tasks efficiently under pressure while maintaining quality standards
• Participate in monthly on-call rotation to support 24/7 operations

What they're looking for

• Threat investigation and incident response
• EDR platform expertise (CrowdStrike, Microsoft Defender for Endpoint, SentinelOne, or CarbonBlack)
• Windows and MacOS system fundamentals
• Technical writing and documentation
• Identity security technologies
• AI tool integration and automation
• Problem-solving under pressure
• Collaboration and communication

Benefits

• Remote position (USA only)
• Flexible day shift hours (10am-6pm MT)
• Opportunity to work with cutting-edge security technology
• Collaboration with specialized teams in detection and threat intelligence
• Focus on high-impact, high-ownership work environment

Likely interview questions

• Walk us through your experience responding to a security incident—what was your approach to containment and remediation?
• Which EDR platforms have you used, and how would you compare their investigation capabilities?