Bangalore · Hybrid

Information Security Engineer (Thick Client Testing / Harness / VAPT)

Full-timePosted 28 Oct

Salary: Not disclosed
Experience: 3–5 years
Eligible batches: 2021 · 2022 · 2023
Location: BangaloreHybrid

About the role

Zscaler is seeking an Information Security Engineer based in Bangalore to strengthen its Zero Trust Exchange platform. The role sits within the Cyber and Data Security team and reports to the Director of Information Security Engineering. You will lead penetration‑testing initiatives, perform deep security architecture reviews, and build automation that reduces manual effort while protecting the company’s global ecosystem.

Responsibilities

Execute advanced penetration tests on web applications, thick‑client software, and APIs, leveraging AI‑driven techniques.
Conduct comprehensive security architecture assessments and deliver strategic remediation guidance.
Collaborate with engineering and operations to prioritize and track vulnerability remediation.
Design and implement security‑automation scripts and harnesses to streamline repetitive testing tasks.
Investigate hard‑to‑reproduce issues using telemetry and instrumentation data.

Eligibility

3‑5 years of hands‑on experience in manual security assessments for web, thick‑client, and API environments.
Demonstrated ability to perform security architecture reviews for complex network and application stacks.
Strong problem‑solving mindset, comfort with ambiguity, and a collaborative, ownership‑driven attitude.

Skills

Proficiency in penetration testing tools and methodologies.
Deep knowledge of security concepts, cryptography, Unix/Linux architecture, and networking fundamentals.
Ability to read and debug C/C++, Java, and JavaScript code and create custom testing harnesses.
Foundational understanding of AI/ML technologies and experience applying them to security workflows.
Advanced scripting skills for automation (e.g., Python, Bash).