Zscaler Security Engineer

Zscaler Security Engineer (ZIA/DLP)

Contract

3 months +

London OR Edinburgh OR Leeds 2 days per week rest of the time working from home.

£600 per day Outside IR35

Please note you must be eligible for, or already holding, UK Security Clearance (SC).

We are supporting a large UK enterprise organisation seeking a Zscaler specialist to strengthen its Secure Service Edge platform and improve its cloud security posture.

This engagement focuses on Zscaler Internet Access (ZIA) engineering, particularly Data Loss Prevention (DLP) policy development, security posture hardening, and analysis of web and audit logs to strengthen Internet security controls across the organisation.

You will work closely with cyber security teams and platform vendors to optimise Zscaler policies, investigate suspicious web activity, and improve the effectiveness of the organisations Secure Web Gateway capabilities.

• Administer and optimise Zscaler Internet Access (ZIA) within an enterprise Secure Service Edge environment.
• Design and configure Zscaler DLP policies to protect sensitive organisational data.
• Analyse web gateway logs, audit logs, and security alerts to identify malicious domains and suspicious activity.
• Harden Zscaler policies, access controls, and SSL inspection configurations to improve the organisations security posture.
• Support capabilities across CASB, Cloud Browser Isolation (CBI), and DLP within the SSE platform.
• Work with cyber security teams and third-party vendors to troubleshoot issues and improve service performance.
• Manage incidents and service requests through Service Now.

• Strong hands‑on experience administering Zscaler Internet Access (ZIA) in an enterprise environment.
• Proven experience designing and implementing Zscaler DLP policies.
• Experience analysing malicious domains, URLs, and web traffic behaviour within Secure Web Gateway platforms.
• Experience working with security logs and incident investigations.

• Experience with Cloud Security Posture Management (CSPM) or SaaS Security Posture Management (SSPM) tools.
• Familiarity with Crowd Strike or SIEM platforms.
• Experience improving enterprise security posture within cloud or SSE environments.