Security Architect / Security Engineer
- Salary
- $164,500 - $235,000
- Level
- Lead
- Work type
- Remote · US only
Not stated in the posting: visa.
Open. First seen 14 October 2026.
About the role
Zscaler's standard text
Zscaler (NASDAQ: ZS) accelerates digital transformation so customers can be more agile, efficient, resilient, and secure. The Zscaler Zero Trust Exchange platform protects thousands of customers from cyberattacks and data loss by securely connecting users, devices, and applications in any location. Distributed across 200+ public data centers globally and thousands of private sites at the edge, the SASE-based Zero Trust Exchange is the world’s largest in-line cloud security platform.
We believe the future of work is Human + AI and are building an AI-native enterprise where human potential is amplified by machine intelligence to solve the world’s hardest security challenges. Driven by deep customer obsession, we are committed to the mission, outcome, and to each other. We bring these commitments to life through three core behaviors: ownership and collaboration, trust through outcomes and impact, and a challenge culture with ongoing feedback. Ready to make an impact at the company pioneering security transformation in the AI era? Join us at Zscaler.
Role
We are looking for a Security Architect / Security Engineer to join our team. This is a Remote-USA role, reporting to the VP, Information Security Engineering in the Exposure Management & Security Operations department. We’re looking for a hands-on Security Architect / Security Engineer to design, build, and operationalize security capabilities across Agentic AI and Cloud Security.
This is an implementation-focused role for someone who can ship production-grade security controls, develop secure reference architectures, and drive response and remediation for security issues across AI systems and cloud-native environments.
What you’ll do (Role Expectations)
- Build secure agent runtimes, reusable libraries, reference implementations, and validation pipelines for agentic AI applications and workflows
- Implement secure agent patterns including planner/executor flows, tool routing, structured outputs, memory/state controls, and RAG trust boundaries
- Design and implement security controls for cloud-native environments across AWS, Azure, and GCP, including IAM, workload protection, and logging
- Partner with platform and engineering teams to embed secure-by-default cloud controls into shared services and developer workflows
- Lead incident response, triage, and remediation workflows for cloud platforms and AI systems in partnership with SOC and engineering teams
Who You Are (Success Profile)
- You are a pragmatic builder who is obsessed with creating, iterating, and shipping secure reference architectures, balancing technical excellence with rapid, hands-on value delivery.
- You thrive in ambiguity and feel comfortable designing secure paths for cutting-edge technologies like Agentic AI where standards are still evolving.
- You are driven by innovation, bringing deep curiosity and technical engineering fundamentals to solve complex, novel security challenges in cloud and AI environments.
- You act like an owner with a strong bias for action, navigating seamlessly between high-level cloud security strategy and deep, hands-on control implementation.
- You are resilient and adaptable, maintaining composure and focus during critical incident response activities to guide cross-functional teams toward swift remediation.
What We’re Looking for (Minimum Qualifications)
- Foundational understanding of AI/ML technologies and experience leveraging, securing, or positioning AI-driven solutions to optimize outcomes within your functional domain
- 7+ years of experience in security engineering, cloud security, application security, or platform security with direct implementation ownership
- Strong coding skills with experience delivering production systems, with Python, TypeScript, or Node preferred
- Hands-on experience with agentic AI systems, including tool/function calling, multi-step planning, RAG, memory/state management, and orchestration
- Strong cloud security experience in AWS, Azure, and/or GCP, including IAM, logging/monitoring, workload protection, Kubernetes, and IaC security
- Practical experience in incident response, including investigation, coordination, and remediation utilizing SIEM, SOAR, EDR, CSPM, or CNAPP tools
What Will Make You Stand Out (Preferred Qualifications)
- Proven ability to leverage AI technologies and workflows to drive measurable operational efficiency
- Familiarity with OWASP LLM Top 10, MITRE ATLAS, NIST AI RMF, and modern cloud security frameworks
- Experience building red-team style testing or evaluation harnesses for LLM applications and agentic systems
- 10+ years of experience in security engineering, cloud security, application security, or platform security with direct implementation ownership
#LI-KM9 #LI-Remote
Zscaler’s salary ranges are benchmarked and are determined by role and level. The range displayed on each job posting reflects the minimum and maximum target for new hire salaries for the position across all US locations and could be higher or lower based on a multitude of factors, including job-related skills, experience, and relevant education or training.
The base salary range listed for this full-time position excludes commission/ bonus/ equity (if applicable) + benefits.
Base Pay Range
$164,500—$235,000 USD
Zscaler's standard text
At Zscaler, we are committed to building a team that reflects the communities we serve and the customers we work with. We foster an inclusive environment that values all backgrounds and perspectives, emphasizing collaboration and belonging. Join us in our mission to make doing business seamless and secure.
Our Benefits program is one of the most important ways we support our employees. Zscaler proudly offers comprehensive and inclusive benefits to meet the diverse needs of our employees and their families throughout their life stages, including:
- Various health plans
- Time off plans for vacation and sick time
- Parental leave options
- Retirement options
- Education reimbursement
- In-office perks, and more!
Learn more about Zscaler's hybrid working model and benefits here.
Zscaler's standard text
By applying for this role, you adhere to applicable laws, regulations, and Zscaler policies, including those related to security and privacy standards and guidelines.
Zscaler is committed to providing equal employment opportunities to all individuals. We strive to create a workplace where employees are treated with respect and have the chance to succeed. All qualified applicants will be considered for employment without regard to race, color, religion, sex (including pregnancy or related medical conditions), age, national origin, sexual orientation, gender identity or expression, genetic information, disability status, protected veteran status, or any other characteristic protected by federal, state, or local laws.
See more information by clicking on the Know Your Rights: Workplace Discrimination is Illegal link.
Pay Transparency
Zscaler complies with all applicable federal, state, and local pay transparency rules.
Zscaler's standard text
Zscaler is committed to providing reasonable support (called accommodations or adjustments) in our recruiting processes for candidates who are differently abled, have long term conditions, mental health conditions or sincerely held religious beliefs, or who are neurodivergent or require pregnancy-related support.
What this role asks for
Particular to this role
IAM · Node.js · OWASP · SIEM · TypeScript
Rare in Zscaler's other 221 open postings.
Standard for security roles
AWS · Python
Common in security postings at any company.
In most of Zscaler's ads
Zero Trust
Named in most of its open postings, whatever the role.
60% of this description is written for the role. The rest is Zscaler's standard text, folded away below.
Read against Zscaler's other open postings on this site.
The team: Exposure Management & Security Operations HIRES STEADILY
This role is one of 18 open in Exposure Management & Security Operations. 5 were posted in the last 30 days and the oldest in January: a team that hires all year rather than one being built.
WHAT THE TEAM WORKS WITH, ACROSS ITS POSTINGS
Zero Trust (18 of 18), Python (10 of 18), AWS (9 of 18), CI/CD (8 of 18), LLM (8 of 18), Azure (6 of 18), GCP (6 of 18)
OTHER ROLES ON THIS TEAM
- Sr. Software Development Engineer posted Oct 15
- Security-Compliance Program Manager posted Oct 7
- Senior Staff Machine Learning Engineer posted Sep 30
- Senior Machine Learning Engineer posted Sep 30
- Sr. Staff Integration Engineer (Security Platform and Data Pipelines) posted Sep 22
- Detection Analyst posted Sep 17
- Principal Software Development Engineer - Agentic Systems posted Sep 17
- Principal Backend Engineer (Analytics) posted Sep 14
- Staff Detection Engineer posted Sep 1
- Director of Data Engineering posted Aug 25
- Senior Detection Analyst posted Aug 12
- Sr. Staff Backend Engineer posted Jul 1
- Security Compliance Architect posted May 22
- Staff Technical Program Manager - Compliance Architecture posted May 5
- Staff Detection Engineer posted Apr 29
- Staff Detection Analyst posted Apr 29
- Principal Vulnerability Management Engineer posted Jan 13
From the team and dates on Zscaler's own job board.
See Security Engineer salaries in Remote →
Similar jobs
- Senior Security Engineer - End-User, Infrastructure & AI Security at PubMatic
Shares 10 skills: OWASP, SIEM, Zero Trust… · same country - Lead Security Architect – Cloud Platform & Network Security at Logos Space
Shares 7 skills: SIEM, Zero Trust, GCP… · Lead level · same country - Security Engineer II at Akuna Capital
Shares 9 skills: OWASP, SIEM, Zero Trust… · same country - Staff Security Engineer at Robots and Pencils
Shares 9 skills: OWASP, SIEM, IAM… · same country - Software Engineer, Security Engineering at Bot Auto
Shares 9 skills: OWASP, SIEM, Zero Trust… · same country - Senior Product Support Engineer at Zscaler
Also at this company
Is this your posting and you want it taken down? Email info@careerholo.com.