Principal Zero-Day Vulnerability Researcher

3 Months ago • 10 Years + • Cyber Security • $161,000 PA - $230,000 PA

Job Summary

Job Description

Zscaler seeks a Principal Zero-Day Vulnerability Researcher to lead advanced vulnerability research projects, identify zero-day vulnerabilities in popular software applications, develop proof-of-concept exploits, mentor junior researchers, document findings, and present research at conferences. This role requires 10+ years' experience in vulnerability research and exploit development, proficiency in debuggers, disassemblers, and building automated fuzzing tools. The researcher will contribute to enhancing Zscaler's security solutions and publish research blogs.
Must have:
  • 10+ years in vulnerability research and exploit development
  • Proficient in debuggers, disassemblers
  • Experience building automated fuzzing tools
  • Professional English writing and public speaking skills
Good to have:
  • Bachelor's/graduate degree in computer science/engineering
  • Responsible disclosure with documented CVEs for Microsoft products
  • Knowledge of Windows OS internals and security features
Perks:
  • Various health plans
  • Time off plans
  • Parental leave options
  • Retirement options
  • Education reimbursement
  • In-office perks

Job Details

About Zscaler

Serving thousands of enterprise customers around the world including 40% of Fortune 500 companies, Zscaler (NASDAQ: ZS) was founded in 2007 with a mission to make the cloud a safe place to do business and a more enjoyable experience for enterprise users. As the operator of the world’s largest security cloud, Zscaler accelerates digital transformation so enterprises can be more agile, efficient, resilient, and secure. The pioneering, AI-powered Zscaler Zero Trust Exchange™ platform protects thousands of enterprise customers from cyberattacks and data loss by securely connecting users, devices, and applications in any location. 

Named a Best Workplace in Technology by Fortune and others, Zscaler fosters an inclusive and supportive culture that is home to some of the brightest minds in the industry. If you thrive in an environment that is fast-paced and collaborative, and you are passionate about building and innovating for the greater good, come make your next move with Zscaler. 

Our Engineering team built the world's largest cloud security platform from the ground up, and we keep building. With more than 100 patents and big plans for enhancing services and increasing our global footprint, the team has made us and our multitenant architecture today's cloud security leader, with more than 15 million users in 185 countries. Bring your vision and passion to our team of cloud architects, software engineers, security experts, and more who are enabling organizations worldwide to harness speed and agility with a cloud-first strategy.

Zscaler is looking for a technical researcher with experience discovering zero-day vulnerabilities. You will be responsible for reverse engineering popular software applications to discover zero-day security flaws that can be exploited. The results will be used to mitigate security vulnerabilities, present at conferences, and publish research blogs.

We're looking for an experienced Principal Zero-Day Vulnerability Researcher to join our Security Research team. Reporting to the Sr. Director, Threat Intelligence, you'll be responsible for:

  • Lead advanced vulnerability research projects to enhance our security solutions.
  • Conduct in-depth research to identify zero-day vulnerabilities in popular software applications.
  • Develop proof-of-concept exploits to demonstrate the potential impact of zero-day vulnerabilities.
  • Mentor junior researchers to foster a culture of learning and new ideas.
  • Document findings and provide detailed technical reports and present research at industry conferences.

What We're Looking for (Minimum Qualifications)

  • Required 10+ years in vulnerability research and exploit development.
  • Experience with debuggers (OllyDbg, WinDbg, or x64dbg) and disassemblers/decompilers (IDA Pro or Ghidra) and proficiency in common software vulnerabilities and binary exploitation.
  • Experience building automated fuzzing tools to discover new vulnerabilities.
  • Professional English writing experience drafting blogs, technical reports and have public speaking skills.

What Will Make You Stand Out (Preferred Qualifications)

  • Bachelor's or graduate degree from a four-year college or university (preferably in computer science, engineering, or a related discipline), or equivalent security industry work experience.
  • Experience responsible disclosure with documented CVEs for Microsoft products and services.
  • Knowledge of Windows operating system internals such as the kernel architecture and related components. as well as familiarity with Windows security features such as ASLR, DEP, and Control Flow Guard and evasion techniques.

#LI-JM1

#LI-Remote

Zscaler’s salary ranges are benchmarked and are determined by role and level. The range displayed on each job posting reflects the minimum and maximum target for new hire salaries for the position across all US locations and could be higher or lower based on a multitude of factors, including job-related skills, experience, and relevant education or training.

The base salary range listed for this full-time position excludes commission/ bonus/ equity (if applicable) + benefits.

Base Pay Range
$161,000$230,000 USD

At Zscaler, we believe that diversity drives innovation, productivity, and success. We are looking for individuals from all backgrounds and identities to join our team and contribute to our mission to make doing business seamless and secure. We are guided by these principles as we create a representative and impactful team, and a culture where everyone belongs. For more information on our commitments to Diversity, Equity, Inclusion, and Belonging, visit the Corporate Responsibility page of our website.

Our Benefits program is one of the most important ways we support our employees. Zscaler proudly offers comprehensive and inclusive benefits to meet the diverse needs of our employees and their families throughout their life stages, including:

  • Various health plans
  • Time off plans for vacation and sick time
  • Parental leave options
  • Retirement options
  • Education reimbursement
  • In-office perks, and more!

By applying for this role, you adhere to applicable laws, regulations, and Zscaler policies, including those related to security and privacy standards and guidelines.

Zscaler is proud to be an equal opportunity and affirmative action employer. We celebrate diversity and are committed to creating an inclusive environment for all of our employees. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy or related medical conditions), age, national origin, sexual orientation, gender identity or expression, genetic information, disability status, protected veteran status or any other characteristics protected by federal, state, or local laws.

See more information by clicking on the Know Your Rights: Workplace Discrimination is Illegal link.

Pay Transparency

Zscaler complies with all applicable federal, state, and local pay transparency rules. For additional information about the federal requirements, click here.

Zscaler is committed to providing reasonable support (called accommodations or adjustments) in our recruiting processes for candidates who are differently abled, have long term conditions, mental health conditions or sincerely held religious beliefs, or who are neurodivergent or require pregnancy-related support.

Similar Jobs

PwC - Cloud Security Engineering - Senior Manager

PwC

Prague, Prague, Czechia (On-Site)
4 Months ago
PwC - Senior Security Engineers (Entra ID/AD)

PwC

Sofia, Sofia City Province, Bulgaria (On-Site)
4 Months ago
Axinous - Architect, Software Development

Axinous

San Jose, California, United States (Hybrid)
3 Months ago
undefined - Senior Platform Security Engineer

Bengaluru, Karnataka, India (On-Site)
4 Months ago
Tencent - 安全技术开发

Tencent

Shenzhen, Guangdong Province, China (On-Site)
3 Months ago
Luminar Technologies - Security Admin Engineer , Cybersecurity Operations

Luminar Technologies

Bengaluru, Karnataka, India (Hybrid)
5 Months ago
Google - Leadership Support Manager

Google

(On-Site)
3 Months ago
Meta - Offensive Security Engineer Intern

Meta

Bellevue, Washington, United States (On-Site)
3 Months ago
ByteDance - Senior Security Software Architect, Security Engineering

ByteDance

Singapore (On-Site)
3 Months ago

Get notifed when new similar jobs are uploaded

Similar Skill Jobs

Saviynt - Consultant, Professional Services, IAM/IGA

Saviynt

Bengaluru, Karnataka, India (Hybrid)
4 Months ago
ION - Senior Security Architect

ION

London, England, United Kingdom (On-Site)
4 Months ago
PwC - Risk & Controls (Non US) - Senior Cyber Security Associate - BLR/KOL/HYD/MUM

PwC

Kolkata, West Bengal, India (On-Site)
3 Months ago
Nagarro - Associate Principal Engineer

Nagarro

Sri Lanka (Remote)
4 Months ago
Baker Hughes - Return to Career - India

Baker Hughes

Bengaluru, Karnataka, India (On-Site)
5 Months ago
Google - Software Engineer III, Infrastructure, Google Cloud Security and Privacy

Google

San Francisco, California, United States (On-Site)
3 Months ago
Saviynt - Account Executive

Saviynt

Houston, Texas, United States (Remote)
4 Months ago

Get notifed when new similar jobs are uploaded

Jobs in San Jose, California, United States

IGT - Call Center Associate I

IGT

Jacksonville, Florida, United States (Hybrid)
2 Months ago
PENN Interactive - Head of Product Management

PENN Interactive

Philadelphia, Pennsylvania, United States (Hybrid)
4 Months ago
Glean - Vertical Marketing Manager

Glean

Palo Alto, California, United States (Hybrid)
2 Months ago
Visa - Sr. Data Scientist

Visa

Atlanta, Georgia, United States (Hybrid)
3 Months ago
SSC Technologies - Manager - Hedge Fund/ Private Equity Fund Accounting

SSC Technologies

Los Angeles, California, United States (Hybrid)
5 Months ago
Trek - Production Tech

Trek

Baltimore, Maryland, United States (On-Site)
5 Months ago
Duolingo - Senior Product Manager, Math

Duolingo

Pittsburgh, Pennsylvania, United States (On-Site)
4 Months ago
Cision - Sr. Global Compensation Analyst

Cision

United States (Remote)
4 Months ago
Salesforce - Manager, Accounting

Salesforce

Indianapolis, Indiana, United States (On-Site)
5 Months ago
AGS - American Gaming Systems - Field Service Technician II

AGS - American Gaming Systems

Florida, United States (On-Site)
2 Months ago

Get notifed when new similar jobs are uploaded

Cyber Security Jobs

Varonis  - Product Security GRC

Varonis

Morrisville, North Carolina, United States (On-Site)
4 Months ago
PwC - Cybersecurity-IAM - Sailpoint IDN Developer-Senior Associate-Hyderabad

PwC

Hyderabad, Telangana, India (On-Site)
3 Months ago
InMobiInMobi - Senior Information Security Analyst (IT Risk)

InMobiInMobi

Bengaluru, Karnataka, India (On-Site)
5 Months ago
Anavation - Information Security Engineer

Anavation

Reston, Virginia, United States (On-Site)
4 Months ago
Amgen - Security System Manager

Amgen

Hyderabad, Telangana, India (On-Site)
3 Months ago
Britive - STRATEGIC ACCOUNT EXECUTIVE

Britive

(Remote)
3 Months ago
PwC - CD&E -SOC L1 Support- Associate 2 - Bangalore

PwC

Bengaluru, Karnataka, India (On-Site)
4 Months ago
Palo Alto Networks - Domain Consultant Cortex

Palo Alto Networks

Dubai, Dubai, United Arab Emirates (Remote)
3 Months ago
PwC - ETIC, GCP/Oracle Cloud Engineer - Manager

PwC

Cairo, Cairo Governorate, Egypt (On-Site)
4 Months ago
PwC - Assistant Manager - System and Process Assurance

PwC

Colombo, Western Province, Sri Lanka (On-Site)
4 Months ago

Get notifed when new similar jobs are uploaded

About The Company

Axonius gives customers the confidence to control complexity by mitigating threats, navigating risk, automating response actions, and informing business-level strategy. With solutions for both cyber asset attack surface management (CAASM) and SaaS management, Axonius is deployed in minutes and integrates with hundreds of data sources to provide a comprehensive asset inventory, uncover gaps, and automatically validate and enforce policies. Cited as one of the fastest-growing cybersecurity startups, with accolades from CNBC, Forbes, and Fortune, Axonius covers millions of assets, including devices and cloud assets, user accounts, and SaaS applications, for customers around the world. For more, visit Axonius.com.

View All Jobs

Get notified when new jobs are added by Axinous

Level Up Your Career in Game Development!

Transform Your Passion into Profession with Our Comprehensive Courses for Aspiring Game Developers.

Job Common Plug