About this role
Zscaler (NASDAQ: ZS) accelerates digital transformation so customers can be more agile, efficient, resilient, and secure. The Zscaler Zero Trust Exchange platform protects thousands of customers from cyberattacks and data loss by securely connecting users, devices, and applications in any location. Distributed across 200+ public data centers globally and thousands of private sites at the edge, the SASE-based Zero Trust Exchange is the world’s largest in-line cloud security platform.
We believe the future of work is Human + AI and are building an AI-native enterprise where human potential is amplified by machine intelligence to solve the world’s hardest security challenges. Driven by deep customer obsession, we are committed to the mission, outcome, and to each other. We bring these commitments to life through three core behaviors: ownership and collaboration, trust through outcomes and impact, and a challenge culture with ongoing feedback. Ready to make an impact at the company pioneering security transformation in the AI era? Join us at Zscaler.
Role
We are looking for a Principal Engineer, Vulnerability & Exposure Management to join our team. This is a hybrid role, reporting to the Senior Manager, Information Security Engineering in the Product Security department.
This critical role helps modernize how exposure is discovered, prioritized, and reduced across our cloud, infrastructure, applications, APIs, endpoints, containers, and internet-facing assets. As an individual contributor, you will own our external attack surface management (EASM) technology, set the technical direction for the team, and engineer resilient systems that automate exposure identification, routing, and verified remediation.
What you’ll do (Role Expectations)
• Own EASM end to end: discovering internet-facing assets, mapping each to its owner, confirming what is exploitable, routing findings to owners and the SOC, and verifying closure with evidence
• Design and build the system behind the program: ingestion, enrichment, storage, ticketing and reconciliation, running daily and alerting when something fails
• Build risk-based prioritization that goes beyond standard CVSS, using exploitability, threat intelligence, runtime exposure and business context
• Set the technical direction for the team: what to build or fix next across scanning, exposure and automation, why, and the plan to get there, while mentoring engineers and raising the team's technical bar
• Drive remediation across engineering, IT, cloud security and the SOC, turn gaps that nobody owns into a named route, and report exposure trends to leadership
Who You Are (Success Profile)
• You thrive in ambiguity. You're comfortable building the path as you walk it. You thrive in a dynamic environment, seeing ambiguity not as a hindrance, but as the raw material to build something meaningful.
• You act like an owner. Your passion for the mission fuels your bias for action. You operate wit