IDC seeks a contract Cybersecurity Engineer to manage and operate our Zscaler environment and lead our vulnerability management program. The contractor will be responsible for day-to-day administration of Zscaler services, enforcing secure access policies, tuning and operating vulnerability scanning and remediation workflows, and driving measurable reduction in exposure across the estate.
Responsibilities
- Manage and administer Zscaler services including policy configuration, user/group management, log analysis, troubleshooting, and integrations with identity providers and other security tooling.
- Design, implement, and maintain Zero Trust access and web security controls to meet IDC security requirements and business access needs.
- Own the vulnerability management lifecycle: schedule and run authenticated and unauthenticated scans, validate findings, prioritize risk, and track remediation to closure using established frameworks and tooling.
- Triage, validate, and risk-score vulnerability findings; produce clear remediation guidance and coordinate fixes with system owners and engineering teams.
- Create and deliver regular metrics, dashboards, and executive reports showing program health, patch/mitigation cadence, and trend analysis.
Required skills and experience
- Hands-on administration and operational experience with Zscaler (ZIA & ZPA), including policy design and log analysis.
- Proven experience running enterprise vulnerability management programs, including scanning, triage, and coordination of remediation activities.
- Familiarity with common vulnerability scanning platforms and workflow tools.
- Strong understanding of network protocols, authentication/authorization (SAML, SSO, MFA), and Zero Trust principles.
- Ability to translate technical findings into clear remediation tasks and to work cross-functionally with engineering and IT teams.
- Strong written documentation and reporting skills.
Preferred qualifications
- Certifications such as CISSP, GIAC, Zscaler Certified Cloud Administrator, or equivalent.
- Experience integrating Zscaler telemetry with SIEM, SOAR, or other detection tools.
Why IDC?
IDC is the most respected global technology market research firm. We are changing the way the world thinks about the impact of technology on business and society. Our people, data, and analytics create global technology insights that accelerate customer success. IDC has been recognized for five consecutive years (2020, 2021, 2022, 2023, 2024) by the IIAR as the Analyst Firm of the Year which is one of the highest accolades for the technology market research industry.
Our collaborative, innovative and entrepreneurial culture is the perfect place for you to discover your future.
IDC is committed to providing equal employment opportunities for all qualified persons. Employment eligibility verification required. We participate in E-Verify.