All remote jobs

Senior Information Security Engineer

Review the role, location requirements, compensation details, and application process before deciding whether this opportunity fits your next career move.

Remote from
Costa Rica
Salary
Undisclosed
Department
Cybersecurity
Employment
Full Time
Experience
Senior
Published
Apply before
22 Nov 2026
Listing views
36
Application actions
0
Application toolkit

Make your next move.

Prepare your resume, explore your fit, and draft a cover letter for this opportunity.

AI Summary

The role, at a glance.

Zscaler is hiring a Senior Information Security Engineer to support enterprise data-protection operations in a remote Costa Rica-based role. The engineer will implement, tune, and improve data loss prevention controls across web, endpoint, email, cloud, and SaaS environments. Core work includes investigating DLP alerts, reducing false positives, safely progressing controls toward blocking, and partnering with business teams to protect sensitive data. The role particularly values experience with Zscaler ZIA DLP, CASB, DSPM, Google Workspace, automation, and AI-assisted operational improvements.

Role DNA

A quick view of the complexity, pace, ownership and collaboration implied by the job description.

Job Complexity

4/5
EasyHard

Pace & Pressure

4/5
RelaxedFast-paced

Autonomy Level

4/5
GuidedFull ownership

Communication Load

4/5
IndependentCollaborative
AI insightThis is a senior security engineering role requiring strong practical judgment when tuning DLP controls without disrupting legitimate business activity. It combines technical implementation, alert analysis, SaaS data protection, automation, and cross-functional stakeholder management.

Salary analysis

Estimated compensation compared with the broader US market for similar roles.

Estimated job median (per year)Highly competitive
$70,000
US market range (per year)$55k–$85k
AI insightThe yearly pay period is inferred from the job context; it was not explicitly stated by the employer. No employer compensation was disclosed. The annual cadence and USD figures are inferred estimates for a senior data-protection security engineering role based in Costa Rica and are not employer-provided pay.

Core skills

Skills and capabilities most closely associated with this opportunity.

Sample interview questions
How do you tune a DLP policy while minimizing disruption to legitimate business workflows?

I begin in monitor mode and baseline alert volume, rule matches, data classifications, and affected user groups. I review true and false positives with data owners, refine detection logic and policy exceptions, then phase enforcement from coaching to blocking for high-confidence cases. I document decisions and continuously measure false-positive rates and business impact.

Describe your approach to investigating a potentially sensitive-data exfiltration alert.

I validate the detection context first: user, device, destination, data type, channel, and policy match. I correlate the event with identity, endpoint, email, and SaaS activity to determine whether the transfer was authorized, accidental, or malicious. I then contain risk as needed, engage the data owner and incident-response stakeholders, and use findings to improve the detection or control.

What are key considerations when deploying DLP in Google Workspace and other SaaS applications?

I identify sensitive-data repositories, business processes, user roles, sharing patterns, and regulatory requirements before defining controls. Policies should account for external sharing, downloads, OAuth applications, email forwarding, and unmanaged devices. I validate coverage through testing and monitor results so controls can be adjusted without preventing approved collaboration.

How would you decide when a DLP control is ready to move from alerting to blocking?

I would require evidence that detection precision is consistently high, the business process is understood, valid exceptions are documented, and affected stakeholders have been informed. I would also test the control with a limited population or staged rollout, define escalation paths, and monitor post-enforcement outcomes closely. Blocking should be reversible if unexpected operational impact appears.

How have you used automation or AI to improve security operations?

I use automation to enrich alerts with asset, identity, classification, and destination context, which reduces manual investigation time and improves prioritization. AI-assisted workflows can help cluster similar alerts, summarize evidence, and identify tuning patterns, but I retain human review for enforcement and sensitive decisions. I measure effectiveness through reduced triage time, lower false-positive rates, and improved detection quality.

This analysis is generated from the job description. Salary estimates, role characteristics and sample answers are guidance, not employer-provided facts.
Opportunity details

About this role.

Zscaler (NASDAQ: ZS) accelerates digital transformation so customers can be more agile, efficient, resilient, and secure. The Zscaler Zero Trust Exchange platform protects thousands of customers from cyberattacks and data loss by securely connecting users, devices, and applications in any location. Distributed across 200+ public data centers globally and thousands of private sites at the edge, the SASE-based Zero Trust Exchange is the world’s largest in-line cloud security platform.

We believe the future of work is Human + AI and are building an AI-native enterprise where human potential is amplified by machine intelligence to solve the world’s hardest security challenges. Driven by deep customer obsession, we are committed to the mission, outcome, and to each other. We bring these commitments to life through three core behaviors: ownership and collaboration, trust through outcomes and impact, and a challenge culture with ongoing feedback. Ready to make an impact at the company pioneering security transformation in the AI era? Join us at Zscaler.

Role

We are looking for an Information Security Engineer to join our team. This is a remote role in Costa Rica, reporting to the Senior Manager, Information Security Engineering in the Enterprise Security department. As a member of the Enterprise Security team, you will be responsible for helping to protect Zscaler’s corporate data, focusing on Data Protection operations. The role focuses on implementing and operationalizing Zscaler security tools and continuously improving the fidelity of the alerts that are produced from those systems.

What You’ll Do (Role Expectations)

  • Implement and provide tuning recommendations for data loss prevention solutions
  • Perform periodic reviews of the data protection program with recommendations for improvement
  • Maintain strong relationships with business partners to understand where sensitive data lives and what controls can be put in place to protect it
  • Respond to and improve processes for data loss prevention alerts
  • Focus on data protection solutions in a SaaS-first landscape, with an emphasis on Google Workspace

Who You Are (Success Profile)

  • You are a natural problem-solver who is energized by tackling complex challenges, knowing that finding solutions delivers the greatest impact.
  • You possess a true growth mindset and are committed to continuous development, actively seeking feedback to become a better partner and a stronger teammate.
  • You operate with urgency, balancing speed and quality to deliver high-impact results in a high-growth environment.
  • You are highly data-driven, using analytics and evidence to uncover truth and guide informed decision-making.
  • You are resilient and adaptable, viewing change as an opportunity and navigating complexity with a steady hand.

What We’re Looking for (Minimum Qualifications)

  • Demonstrated curiosity and active exploration of AI tools, with a proven history of integrating new technologies to enhance daily workflows and augment problem-solving
  • Experience with a variety of data loss prevention tools, focusing on various exfiltration avenues, like web, endpoint, and email
  • Proven working knowledge of reviewing DLP alerts, reducing false positives, and moving controls to blocking state with minimal impact to the business
  • Understanding of various data stores, including in the cloud and SaaS, to be able to deploy monitoring functionality and controls
  • Experience in various areas of security, with working knowledge of applying compensating controls and/or monitoring when primary controls/traditional solutions can’t be implemented

What Will Make You Stand Out (Preferred Qualifications)

  • Proven ability to leverage AI technologies and workflows to drive measurable operational efficiency
  • Experience with Zscaler security tools, particularly ZIA DLP (IDM, EDM, CASB) and DSPM
  • Automation and/or AI skills to help with data processing and tuning opportunities

#LI-AJ1 #LI-Remote

At Zscaler, we are committed to building a team that reflects the communities we serve and the customers we work with. We foster an inclusive environment that values all backgrounds and perspectives, emphasizing collaboration and belonging. Join us in our mission to make doing business seamless and secure.

Our Benefits program is one of the most important ways we support our employees. Zscaler proudly offers comprehensive and inclusive benefits to meet the diverse needs of our employees and their families throughout their life stages, including:

  • Various health plans
  • Time off plans for vacation and sick time
  • Parental leave options
  • Retirement options
  • Education reimbursement
  • In-office perks, and more!

Learn more about Zscaler’s hybrid working model and benefits here.

By applying for this role, you adhere to applicable laws, regulations, and Zscaler policies, including those related to security and privacy standards and guidelines.

Zscaler is committed to providing equal employment opportunities to all individuals. We strive to create a workplace where employees are treated with respect and have the chance to succeed. All qualified applicants will be considered for employment without regard to race, color, religion, sex (including pregnancy or related medical conditions), age, national origin, sexual orientation, gender identity or expression, genetic information, disability status, protected veteran status, or any other characteristic protected by federal, state, or local laws. See more information by clicking on the Know Your Rights: Workplace Discrimination is Illegal link.

Pay Transparency

Zscaler complies with all applicable federal, state, and local pay transparency rules.

Zscaler is committed to providing reasonable support (called accommodations or adjustments) in our recruiting processes for candidates who are differently abled, have long term conditions, mental health conditions or sincerely held religious beliefs, or who are neurodivergent or require pregnancy-related support.

Apply now >

This job listing has been manually reviewed by the Jobicy Trust & Safety Team for compliance with our posting guidelines, including verification of the company's legitimacy, accuracy of job details, clarity of remote work policy, and absence of misleading or fraudulent content.

Next step

Apply now.

Follow the employer’s application method and review Jobicy’s safety guidance before sharing personal information.

Did you apply?Let us know, and we’ll help you track your application.

Continue on the employer website

Protect your personal information and never pay to secure an interview or job offer. .

Log in to save
One quick step before you apply

Sign in to continue.

Sign in or create a free account to continue to the employer's application.

Applying is free. After signing in, return to this job and select Apply Now.
Add alert
Jobs Talent AI Tools Salaries
Menu