Senior Information Security Engineer - VAPT, Thick client application

Job Description

Zscaler is seeking a Senior Information Security Engineer to join their Cyber and Data Security team. The ideal candidate will be responsible for security automation and conducting penetration testing on Zscaler applications and infrastructure. They will report to the Sr. Manager, Security Research and will help the team prioritize vulnerabilities, review security bulletins, and conduct security architecture reviews.

Role involves:
• Working on Security Automation
• Conducting pen testing on Zscaler Applications and infrastructure
• Helping the team prioritize vulnerabilities
• Reviewing security bulletins and related news
• Conducting Security Architecture reviews, Threat Modeling, Design review

Requirements:
• Proficient in manual security assessments for web apps, thick client application, and APIs using top tools
• 3+ years of experience, CVE publication, CTF participation, red teaming, and exploit development preferred
• Skilled in thick client pen testing across Windows, Mac, Linux, Android, and iOS
• Experienced in security architecture reviews for networks, thick clients, and web apps
• Strong foundation in security, cryptography, Unix systems, and networking

Role offers:
• Various health plans
• Time off plans for vacation and sick time
• Parental leave options
• Retirement options
• Education reimbursement
• In-office perks