Staff Information Security Engineer (Vulnerability Management)

Who you are

You have extensive experience in information security, particularly in vulnerability management — you've successfully identified, assessed, and mitigated security vulnerabilities in complex environments. Your background includes working within federal or highly regulated sectors, where adherence to strict compliance standards is paramount. You thrive in environments that require autonomy and a high level of accountability, demonstrating your ability to operate effectively within a U.S. SCIF environment. Your communication skills are strong, allowing you to collaborate with cross-functional teams and convey complex security concepts to non-technical stakeholders.

Desirable

Experience with cloud security frameworks and tools is a plus — you understand the nuances of securing cloud-native applications and infrastructure. Familiarity with federal security standards such as NIST or FISMA will enhance your candidacy, as will any certifications like CISSP or CISM. You are proactive in staying updated on the latest security threats and trends, ensuring that your strategies are always aligned with best practices in the industry.

What you'll do

In this role, you will lead vulnerability management initiatives, conducting regular assessments and audits to identify potential security risks — your findings will directly influence the security posture of Zscaler's operations. You will collaborate closely with engineering teams to ensure that security is integrated into the development lifecycle, providing guidance on secure coding practices and vulnerability remediation. Your expertise will be crucial in developing and implementing security policies and procedures that align with federal regulations and industry standards.

You will also be responsible for maintaining documentation related to vulnerability assessments and remediation efforts, ensuring that all actions taken are well-documented and compliant with federal requirements. Regularly reporting on the status of vulnerabilities and the effectiveness of remediation efforts will be part of your responsibilities, allowing you to communicate security risks to senior management effectively.

What we offer

Zscaler provides a dynamic work environment where your contributions will have a significant impact on our cybersecurity efforts — you will be part of a team that values transparency, collaboration, and accountability. We offer competitive compensation and benefits, along with opportunities for professional growth and development. Our culture encourages innovation and supports employees in achieving their full potential, making it an exciting place to advance your career in cybersecurity.