Sr. AI Threat Researcher

About Zscaler Zscaler accelerates digital transformation to ensure our customers can be more agile, efficient, resilient, and secure. As an AI-forward enterprise, we are constantly pushing the envelope, leveraging the world’s largest security data lake to power our cloud-native Zero Trust Exchange platform. This innovation protects our customers from cyberattacks and data loss by securely connecting users, devices, and applications in any location. Here, impact in your role matters more than title and trust is built on results. We say, impact over activity. We seek innovators who actively use AI to amplify their impact and who thrive in an environment where we leverage intelligent systems to stay ahead of evolving threats. We believe in transparency and value constructive, honest debate—we’re focused on getting to the best ideas, faster. We build high-performing teams that can make an impact quickly and with high quality. To do this, we are building a culture of execution centered on customer obsession, collaboration, ownership, and accountability. We value high-impact, high-accountability with a sense of urgency where you’re enabled to do your best work and embrace your potential. If you’re driven by purpose, thrive on solving complex challenges, and want to be part of the team that’s helping to secure the AI age, we invite you to bring your talents to Zscaler and help shape the future of cybersecurity.    Role We are looking for a Sr. Software Developer to join our team. This is a Hybrid role, reporting to the Leader in the Tools & Technology Team in the ThreatLabz department. The Sr. Software Developer will be primarily responsible for designing, building, and maintaining client-side and server-side web applications, taking ownership of end-to-end feature modules and ensuring seamless communication between user-facing interfaces and backend infrastructure. Working within ThreatLabz, the world-class security research arm of Zscaler, this role contributes directly to hunting new threats and protecting millions of global users. What you’ll do (Role Expectations) * Build and scale server-side web applications, secure RESTful APIs, and microservices using Node.js, Python, Django, or Flask * Manage core application security settings, user authentication, authorization protocols, and data protection measures * Map and optimize database schemas using relational systems like PostgreSQL or MySQL and NoSQL engines like MongoDB * Build responsive, high-performance user interfaces and reusable frontend modules utilizing HTML5, CSS3, JavaScript/TypeScript, and modern frameworks * Collaborate closely with the ThreatLabz Cyber Threat Research organization to conduct code reviews, perform unit testing, and maintain software applications Who You Are (Success Profile) * You thrive in ambiguity. You're comfortable building the path as you walk it. You thrive in a dynamic environment, seeing ambiguity not as a hindrance, but as the raw material to build something meaningful. * You act like an owner. Your passion for the mission fuels your bias for action. You operate with integrity because you genuinely care about the outcome. True ownership involves leveraging dynamic range: the ability to navigate seamlessly between high-level strategy and hands-on execution. * You are a problem-solver. You love running towards the challenges because you are laser-focused on finding the solution, knowing that solving the hard problems delivers the biggest impact. * You are a high-trust collaborator. You are ambitious for the team, not just yourself. You embrace our challenge culture by giving and receiving ongoing feedback—knowing that candor delivered with clarity and respect is the truest form of teamwork and the fastest way to earn trust. * You are a learner. You have a true growth mindset and are obsessed with your own development, actively seeking feedback to become a better partner and a stronger teammate. You love what you do and you do it with purpose. What We’re Looking for (Minimum Qualifications) * Demonstrated curiosity and active exploration of AI tools, with a proven history of integrating new technologies like frontier LLMs and vibe coding into workflows to augment problem-solving * A minimum of 2-3 years of professional application development experience with proficiency in Python and backend frameworks including Django and Flask * Strong understanding of database systems like PostgreSQL and MongoDB, alongside hands-on experience with Object Relational Mapper libraries * Expertise in frontend development with HTML5, CSS3, JavaScript, jQuery, and AngularJS * In-depth knowledge of the ELK Stack, including cluster setup, Logstash configuration, Kibana visualizations, Elastic beats, and core Elasticsearch concepts What Will Make You Stand Out (Preferred Qualifications) * Competency in Python-based data science tools such as pandas and NumPy, and experience implementing machine learning algorithms to optimize security solutions * Experience in Agile methodologies and version control tools such as GitHub, GitLab, or SVN * Familiarity with cloud services offered by major providers like AWS, Azure, or GCP #LI-Hybrid #LI-PM5 At Zscaler, we are committed to building a team that reflects the communities we serve and the customers we work with. We foster an inclusive environment that values all backgrounds and perspectives, emphasizing collaboration and belonging. Join us in our mission to make doing business seamless and secure. Our Benefits program is one of the most important ways we support our employees. Zscaler proudly offers comprehensive and inclusive benefits to meet the diverse needs of our employees and their families throughout their life stages, including: * Various health plans * Time off plans for vacation and sick time * Parental leave options * Retirement options * Education reimbursement * In-office perks, and more! Learn more about Zscaler's hybrid working model and benefits here. By applying for this role, you adhere to applicable laws, regulations, and Zscaler policies, including those related to security and privacy standards and guidelines. Zscaler is committed to providing equal employment opportunities to all individuals. We strive to create a workplace where employees are treated with respect and have the chance to succeed. All qualified applicants will be considered for employment without regard to race, color, religion, sex (including pregnancy or related medical conditions), age, national origin, sexual orientation, gender identity or expression, genetic information, disability status, protected veteran status, or any other characteristic protected by federal, state, or local laws. See more information by clicking on the Know Your Rights: Workplace Discrimination is Illegal link. Pay Transparency Zscaler complies with all applicable federal, state, and local pay transparency rules. Zscaler is committed to providing reasonable support (called accommodations or adjustments) in our recruiting processes for candidates who are differently abled, have long term conditions, mental health conditions or sincerely held religious beliefs, or who are neurodivergent or require pregnancy-related support.

Secure Every Identity, from AI to Human Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence. This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk. ABOUT THE ROLE We are seeking a Senior Product Manager to drive the vision, strategy, and execution for a key product area within the Auth0 Identity Security product line, with a focused mandate on the rapidly evolving domain of Agentic Security. This role sits at the intersection of product strategy, cross-functional leadership, and agile execution — requiring someone who can both shape long-term direction and deliver with precision. We are the team that builds solutions that protect our customer’s Auth0 environments. Our group delivers features such as attack protection, bot detection, adaptive MFA, identity security for AI Agents and related analytics / insights on the effectiveness of our solutions in thwarting attacks from bad actors. The ideal candidate brings direct, hands-on experience in agentic security product management, with a deep understanding of how AI agents are built, orchestrated, and secured. This includes practical knowledge of agentic workflows, MCP servers, agentic tooling, and their use through productivity applications such as Claude Code. A core focus of this role is runtime security & AI agent classification: building real-time detection, behavioral analysis, and protection capabilities for agentic systems. The successful candidate will have command of the OWASP Top 10 for Agentic AI attack vectors and mitigations, and will bring experience in identifying and responding to threats such as prompt injection, agent intent anomalies, and rogue agent detection — including scenarios where an agent may have been compromised or infiltrated. Beyond agentic-native threats, this role demands strong fluency in fraud and risk mitigation, spanning both traditional and emerging attack surfaces. This includes a depth of knowledge across classic vectors — Account Takeover (ATO), resource draining, and fraudulent account creation — as well as their evolving equivalents in multi-agent and autonomous system environments. KEY RESPONSIBILITIES * Product Strategy & Roadmap: Define and champion a clear product strategy and roadmap, utilizing data-driven prioritization methods to maximize customer value and business impact. Manage inputs from diverse cross-functional stakeholders. * Customer Experience: Drive customer research (surveys, interviews, data analysis) to identify top opportunities, optimize the end-to-end customer journey, and ensure product value realization. * Experience Design: Partner with Product Design on prototypes, wireframes, and concepts, continuously improving the usability of both the UI and APIs for technical and business audiences. * Agile Execution & Delivery: Maintain active, daily collaboration with engineering teams. Write clear user stories, scope work for sprints, and actively participate in Agile cadences. Proactively solve problems and manage ambiguity to ensure on-time delivery. * Performance Optimization: Drive continuous data analysis and insights into customer adoption. Establish clear hypotheses and baselines for feature launches, then track progress toward strategic targets and drive continuous product iteration based on learnings. * Commercial Growth & Value: Partner closely with Product Marketing to run targeted customer campaigns. These efforts will drive trial conversions, accelerate Product-Led Growth (PLG) motions, boost retention, and increase high-value usage and adoption. * Go-to-Market: Proactively monitor the competitive landscape to identify gaps and differentiators. Partner with Product Marketing and pre-sales engineering to refine product positioning, develop engaging customer value messaging, and craft supporting content (blogs, webinars). * Field & Customer Engagement: Actively engage with the field organization (Sales, Solutions Engineering, Technical Account Managers) to build deep knowledge of the voice of the customer. Drive customer conversations during pre-sales, renewals, and at key events to gather feedback and support adoption. * AI-Powered Productivity: Drive efficiency and strategic insight by leveraging AI tools for high-value activities, including prototyping, synthesizing customer insights, accelerating competitive and market analysis, and rapidly generating high-quality product documentation. REQUIRED QUALIFICATIONS * AI Agent Experience:  Significant product experience with AI Agent creation, orchestration and the use of MCP (Model Context Protocol) servers for exposing context, tools, and resources to agents. Ability to use this experience to define how Auth0's should securely authenticate, authorize, and monitor non-human AI principals at runtime. * Agentic Threat Remediation: You have a strong command of the OWASP Top 10 for Agentic AI, and can articulate how each attack class manifests in real-world agentic deployments. You bring direct experience identifying, triaging, and driving remediation of agentic threats, with particular depth in: prompt injection attacks, agent intent anomalies, and rogue agent detection.  * Product Management Experience:  5-8 years of experience in Product Management, whether from startup or high-growth company environments.  * Education: An Undergraduate and/or Masters Degree in Computer Science, Engineering, Information Systems or a related technical field. * General Security Industry Experience: Prior working experience in the security, fraud or compliance industries with foundational knowledge of Identity and Access Management (IAM/CIAM) concepts (e.g., OAuth 2.0, OpenID Connect, SSO, MFA, RBAC) and/or familiarity with compliance frameworks relevant to identity security (e.g., GDPR, CCPA, SOC 2). * Communication: Excellent communication skills (presentation, verbal, and written) and a highly collaborative approach, working with cross-functional stakeholders across the organization. * Enterprise Software: Demonstrated experience in delivery of global, enterprise software across all aspects of the product lifecycle. * Results Driven: A clear history of being outcome-driven and achieving tangible business results through the successful delivery of products, features, or capabilities that you have owned. * Problem Solving: Keen analytical, problem-solving, and decision-making abilities, with a proven capacity to formulate effective action plans even when faced with incomplete, conflicting, or ambiguous inputs. * Entrepreneurial: Bring an entrepreneurial mindset and a strong intellectual curiosity that drives you to learn and delve deeply into both business and technical aspects of this role. * Agile Development: Deep experience working successfully with engineering teams in an Agile development environment, including scoping, sprint planning, and backlog management and prioritization.   #LIHybrid #P-1164.1  Below is the annual salary range for candidates located in Canada. Your actual salary will depend on factors such as your skills, qualifications, and experience. In addition, Okta offers equity (where applicable), bonus, and benefits, including health, dental, and vision insurance, RRSP with a match, healthcare spending, telemedicine, and paid leave (including PTO and parental leave) in accordance with our applicable plans and policies. To learn more about our Total Rewards program, please visit: https://rewards.okta.com/can. The annual base salary range for this position for candidates located in Canada is between: $146,000—$218,000 CAD The Okta Experience * Supporting Your Well-Being  * Driving Social Impact  * Developing Talent and Fostering Connection + Community We are intentional about connection. Our global community, spanning over 20 offices worldwide, is united by a drive to innovate. Your journey begins with an immersive, in-person onboarding experience designed to accelerate your impact and connect you to our mission and team from day one. Okta is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, ancestry, marital status, age, physical or mental disability, or status as a protected veteran. We also consider for employment qualified applicants with arrest and convictions records, consistent with applicable laws. If reasonable accommodation is needed to complete any part of the job application, interview process, or onboarding please use this Form to request an accommodation. Notice for New York City Applicants & Employees: Okta may use Automated Employment Decision Tools (AEDT), as defined by New York City Local Law 144, that use artificial intelligence, machine learning, or other automated processes to assist in our recruitment and hiring process. In accordance with NYC Local Law 144, if you are an applicant or employee residing in New York City, please click here to view our full NYC AEDT Notice.