Principal Information Security Engineer at Zscaler

Bengaluru, Karnataka, India

Apply Now

Not SpecifiedCompensation

Senior (5 to 8 years), Expert & Leadership (9+ years)Experience Level

Full TimeJob Type

UnknownVisa

Cybersecurity, Cloud Computing, TechnologyIndustries

Requirements

10+ years of progressive experience in Information Security, with at least 5+ years in a dedicated Security Architecture role, preferably in a cloud-native product environment
3+ years of direct experience securing AI/ML systems, models, and data within commercial software products or large-scale SaaS offerings, with a deep understanding of AI/ML specific threat vectors
Proven expertise in designing and securing large-scale, distributed systems on public cloud platforms (AWS, Azure, GCP) as part of a product engineering lifecycle
Strong understanding of AI/ML fundamentals, algorithms, model development lifecycles, and MLOps principles as applied in a product development context
Hands-on experience with threat modeling methodologies (e.g., STRIDE, MITRE ATLAS for ML) applied to product features
Demonstrated ability to translate complex security requirements into practical, implementable architectural designs for product teams (preferred)
Excellent communication, presentation, and interpersonal skills, with the ability to influence technical and non-technical stakeholders (preferred)

Responsibilities

Leading the design and implementation of secure architectures for AI/ML components and features integrated into Zscaler's cloud security products
Developing a strategic roadmap for AI/ML product security, aligning with Zscaler's product vision, business objectives, and the evolving threat landscape
Conducting specialized threat modelling exercises for new and existing AI/ML product features and models, identifying unique vulnerabilities such as adversarial attacks, data poisoning, model inversion, prompt injection, and bias that could impact product efficacy or customer data
Perform comprehensive security risk assessments of AI/ML product initiatives, providing actionable recommendations and driving their remediation within product development cycles
Collaborate closely with AI/ML engineers, data scientists, product management, and other architecture teams to embed security requirements and controls throughout the AI/ML product development lifecycle (SDLC/MLOps)

Skills

Key technologies and capabilities for this role

Information SecuritySecure ArchitecturesAI/MLCloud SecurityZero TrustSASESSEProduct Security

Questions & Answers

Common questions about this position

What experience level is required for this Principal Information Security Engineer role?

Candidates need 10+ years of progressive experience in Information Security, with at least 5+ years in a dedicated Security Architecture role, preferably in a relevant field.

What are the main responsibilities of this position?

The role involves leading secure architectures for AI/ML components, developing a strategic roadmap for AI/ML product security, conducting threat modeling for AI/ML features, performing security risk assessments, and collaborating with AI/ML engineers and other teams.

What is the company culture like at Zscaler?

Zscaler fosters an inclusive and supportive culture that is fast-paced and collaborative, home to some of the brightest minds, and ideal for those passionate about building and innovating.

Is this a remote position or does it require office work?

This information is not specified in the job description.

What is the salary or compensation for this role?

This information is not specified in the job description.

Zscaler

Cloud-based cybersecurity and secure gateway services

About Zscaler

Zscaler provides cloud-based information security services, focusing on internet, web, and cloud security. Its platform functions as a secure gateway that inspects all internet traffic between users and applications, ensuring that threats are identified and stopped before they can access a client's network. This service is offered through a subscription model, allowing large enterprises and government organizations to select the level of security that meets their needs. Zscaler differentiates itself from competitors by offering a strong partner program that enhances market reach and provides partners with training and resources. The company's goal is to support secure digital transformation for its clients by delivering reliable security solutions.

San Jose, CaliforniaHeadquarters

2008Year Founded

$148.8MTotal Funding

IPOCompany Stage

Enterprise Software, CybersecurityIndustries

5,001-10,000Employees

Benefits

Comprehensive health plans

Supportive parental & family leave

On-demand learning & development

Company-sponsored volunteering

Global tuition assistance program

Guilt-free paid time off

Risks

Emerging cybersecurity firms may erode Zscaler's market share.

Economic downturns could impact Zscaler's subscription-based revenue model.

The retirement of CFO Mr. Canessa may lead to financial instability.

Differentiation

Zscaler offers a 100% cloud-based security platform, eliminating on-premise hardware needs.

The company is a Gartner magic quadrant leader for secure web gateways.

Zscaler's platform inspects all internet traffic, ensuring threats are neutralized pre-network.

Upsides

Zscaler's FY/25 guidance was revised upward, indicating strong financial performance.

The partnership with Bharti Airtel enhances Zscaler's zero-trust architecture offerings.

Zscaler's hiring of government experts strengthens its position in the public sector.

Land your dream remote job 3x faster with AI

Try Jobo Free