Threat Response Engineer (TRE) - Early Shift (6am-2pm MT)

About this role

Zscaler seeks a Threat Response Engineer to investigate and remediate confirmed security threats on customer endpoints using EDR tools and security products. You'll work early shift hours (6am-2pm MT) in a fast-paced SOC environment, collaborating across teams to contain threats and enhance customer security posture.

What you'll do

• Investigate detected threats and use security products to analyze, contain, and remediate customer endpoint compromises
• Generate detailed incident reports documenting remediation actions and protection strategies for customers
• Develop and execute effective threat response strategies to strengthen customer security
• Partner with Detection Engineering, Threat Hunting, and Product teams on innovative remediation methods
• Prioritize and manage tasks in high-volume operational environment with monthly on-call rotation participation

What they're looking for

• Threat investigation and incident response
• EDR platform expertise (CrowdStrike, Microsoft Defender, SentinelOne, CarbonBlack)
• Windows and macOS system administration fundamentals
• Identity security technologies
• AI tool integration and workflow automation
• Technical documentation and communication
• Security operations and network protocols knowledge
• Adversary tactics, techniques, and procedures (TTPs)

Benefits

• Remote role (USA only)
• Early shift schedule (6am-2pm MT)
• Opportunity to work with cutting-edge AI and security technologies
• Collaboration with specialized threat response teams
• Impact-driven culture focused on customer obsession
• Professional development and growth mindset environment

Likely interview questions

• Walk us through your most complex endpoint threat investigation—what tools did you use and how did you approach containment and remediation?
• Which EDR platforms have you used extensively, and how do you compare their investigation capabilities?