All remote jobs

Senior Detection Analyst

Review the role, location requirements, compensation details, and application process before deciding whether this opportunity fits your next career move.

Remote from
Costa Rica
Salary
Undisclosed
Department
Cybersecurity
Employment
Full Time
Experience
Senior
Published
Apply before
12 Nov 2026
Listing views
53
Application actions
2
Application toolkit

Make your next move.

Prepare your resume, explore your fit, and draft a cover letter for this opportunity.

AI Summary

The role, at a glance.

This Senior Detection Analyst role investigates EDR telemetry, alerts, and logs spanning endpoint, identity, network, cloud, and SaaS environments for managed detection and response customers. The analyst publishes high-fidelity threat findings and communicates indicators and remediation context clearly to customers. The role also improves Detection Operations through scripting, orchestration, and automation to handle telemetry at scale. Candidates need strong detection-domain experience, query-language proficiency, DevOps practices, and scripting skills in tools such as Python, Ruby, or PowerShell. This is a remote, full-time position restricted to Costa Rica.

Role DNA

A quick view of the complexity, pace, ownership and collaboration implied by the job description.

Job Complexity

4/5
EasyHard

Pace & Pressure

4/5
RelaxedFast-paced

Autonomy Level

4/5
GuidedFull ownership

Communication Load

5/5
IndependentCollaborative
AI insightThe role requires senior-level judgment across multiple security telemetry domains, current attack techniques, and customer-facing threat communication. It also combines operational detection work with automation and workflow improvement in a high-volume MDR environment.

Salary analysis

Estimated compensation compared with the broader US market for similar roles.

Estimated job medianMarket rate
$125,000
US market range$105k–$160k
AI insightNo salary was disclosed in the posting. The figures shown are estimated annual USD base-salary market benchmarks for a US-based senior detection analyst with EDR, cloud, identity, detection engineering, and automation experience; actual Costa Rica compensation may differ materially.

Core skills

Skills and capabilities most closely associated with this opportunity.

Sample interview questions
How would you investigate a high-severity EDR alert with limited initial context?

I would validate the alert fidelity, identify the affected asset and user, then pivot through process trees, command lines, hashes, network activity, authentication events, and related endpoint telemetry. I would map observed behavior to MITRE ATT&CK techniques, establish scope and impact, and document prioritized containment and remediation actions.

Describe an automation opportunity you would identify in a Detection Operations workflow.

I would look for repetitive enrichment tasks, such as gathering asset criticality, user identity details, reputation results, and related alerts. Using Python or PowerShell with platform APIs, I would automate the enrichment and normalize the output into analyst-ready context, while tracking accuracy and time saved.

How do you ensure customer-facing threat communications are both concise and actionable?

I structure findings around what happened, why it matters, affected entities, evidence, current scope, and specific remediation steps. I avoid unnecessary jargon, distinguish confirmed facts from hypotheses, and include clear indicators and recommended owner actions so customers can respond quickly.

What is your approach to tuning a noisy detection without creating a security blind spot?

I would analyze alert patterns, false-positive causes, affected populations, and the detection's ATT&CK coverage before changing it. I would test scoped exclusions or contextual thresholds, preserve logging, monitor outcomes after deployment, and document the residual risk and rationale.

How have you used query languages to support threat hunting or alert triage?

I use structured queries to correlate endpoint, identity, network, and cloud events across a defined time window. For example, I might search for suspicious parent-child process relationships, then join those results with authentication anomalies and outbound connections to determine whether activity is isolated or part of a broader intrusion.

This analysis is generated from the job description. Salary estimates, role characteristics and sample answers are guidance, not employer-provided facts.
Opportunity details

About this role.

Zscaler (NASDAQ: ZS) accelerates digital transformation so customers can be more agile, efficient, resilient, and secure. The Zscaler Zero Trust Exchange platform protects thousands of customers from cyberattacks and data loss by securely connecting users, devices, and applications in any location. Distributed across 200+ public data centers globally and thousands of private sites at the edge, the SASE-based Zero Trust Exchange is the world’s largest in-line cloud security platform.

We believe the future of work is Human + AI and are building an AI-native enterprise where human potential is amplified by machine intelligence to solve the world’s hardest security challenges. Driven by deep customer obsession, we are committed to the mission, outcome, and to each other. We bring these commitments to life through three core behaviors: ownership and collaboration, trust through outcomes and impact, and a challenge culture with ongoing feedback. Ready to make an impact at the company pioneering security transformation in the AI era? Join us at Zscaler.

Role

We are looking for a Senior Detection Analyst to join our team. This is a remote role (in Costa Rica), reporting to the Manager, Detection Analyst in the Detection Operations Team. You will utilize our detection platform to analyze telemetry, alerts, and log sources across several detection domains including Endpoint, Identity, Network, and Cloud to publish threats for our Managed Detection and Response customers. Additionally, by leading projects to improve the Detection Operations workflow through orchestration and automation, you will ensure our customers receive high-fidelity threat analysis and concisely written communication regarding emerging threats at scale.

What You’ll Do (Role Expectations)

  • Analyze EDR telemetry, alerts, and log sources across several detection domains including Endpoint, Identity, Network, and Cloud/SaaS
  • Publish and review threats for customers using concisely written communication to effectively convey key indicators and remediation context
  • Improve and innovate Detection Operations workflows through orchestration and automation to manage high volumes of telemetry

Who You Are (Success Profile)

  • You act like an owner with a passion for our mission, operating with integrity and navigating seamlessly between high-level strategy and hands-on execution.
  • You are a high-trust collaborator who embraces a challenge culture through clear, respectful feedback to build trust and elevate the team.
  • You are customer-obsessed, anchoring decisions in solving real-world problems and championing customer needs from start to finish.
  • You are data-driven, using analytics to measure what matters, replace assumptions with evidence, and guide informed decisions.
  • You think at scale, connecting daily work to the global mission while building resilient solutions designed to last in a high-growth organization.

What We’re Looking for (Minimum Qualifications)

  • Foundational understanding of AI/ML technologies and experience leveraging, securing, or positioning AI-driven solutions to optimize outcomes within your functional domain
  • Strong experience in Endpoint (EDR) and one or more functional areas including Cloud/SaaS, Identity, Email, or Network detection domains
  • Experience with DevOps workflows and common scripting languages such as Python, Ruby, and PowerShell
  • Expertise using query languages and understanding syntax across EDR or other security platforms such as SQL or Lucene
  • Awareness of the current attack landscape (current threats, attack techniques, and vulnerabilities)
  • Strong analytical, documentation, and communication skills

What Will Make You Stand Out (Preferred Qualifications)

  • Proven ability to leverage AI technologies and workflows to drive measurable operational efficiency
  • Previous professional experience in a Red Team or offensive security capacity
  • Active involvement in the Infosec community through writing blogs, participating in webinars, or presenting at conferences
  • Familiarity with MITRE ATT&CK TTPs

#LI-KM9 #LI-Remote

At Zscaler, we are committed to building a team that reflects the communities we serve and the customers we work with. We foster an inclusive environment that values all backgrounds and perspectives, emphasizing collaboration and belonging. Join us in our mission to make doing business seamless and secure.

Our Benefits program is one of the most important ways we support our employees. Zscaler proudly offers comprehensive and inclusive benefits to meet the diverse needs of our employees and their families throughout their life stages, including:

  • Various health plans
  • Time off plans for vacation and sick time
  • Parental leave options
  • Retirement options
  • Education reimbursement
  • In-office perks, and more!

Learn more about Zscaler’s hybrid working model and benefits here.

By applying for this role, you adhere to applicable laws, regulations, and Zscaler policies, including those related to security and privacy standards and guidelines.

Zscaler is committed to providing equal employment opportunities to all individuals. We strive to create a workplace where employees are treated with respect and have the chance to succeed. All qualified applicants will be considered for employment without regard to race, color, religion, sex (including pregnancy or related medical conditions), age, national origin, sexual orientation, gender identity or expression, genetic information, disability status, protected veteran status, or any other characteristic protected by federal, state, or local laws. See more information by clicking on the Know Your Rights: Workplace Discrimination is Illegal link.

Pay Transparency

Zscaler complies with all applicable federal, state, and local pay transparency rules.

Zscaler is committed to providing reasonable support (called accommodations or adjustments) in our recruiting processes for candidates who are differently abled, have long term conditions, mental health conditions or sincerely held religious beliefs, or who are neurodivergent or require pregnancy-related support.

Apply now >

This job listing has been manually reviewed by the Jobicy Trust & Safety Team for compliance with our posting guidelines, including verification of the company's legitimacy, accuracy of job details, clarity of remote work policy, and absence of misleading or fraudulent content.

Next step

Apply now.

Follow the employer’s application method and review Jobicy’s safety guidance before sharing personal information.

Did you apply?Let us know, and we’ll help you track your application.

Continue on the employer website

Protect your personal information and never pay to secure an interview or job offer. .

Log in to save
One quick step before you apply

Sign in to continue.

Sign in or create a free account to continue to the employer's application.

Applying is free. After signing in, return to this job and select Apply Now.
Add alert
Jobs Talent AI Tools Salaries
Menu