The Cyber Security Analyst supports the Sales Engineering team by researching customer environments for risk, owning threat intelligence, and building tooling to accelerate evaluations. The role involves analyzing vulnerability postures, validating security stacks, and presenting findings to customers while collab...
Full description
Description
Zafran is actively looking for an experienced Cyber Security Analyst to join the Sales Engineering organization at our dynamic cybersecurity startup. We are looking for an individual who thrives on unraveling the intricacies of computing environments and attackers' techniques, and who turns that understanding into tooling, data, and evidence our customers can act on. This role sits with the field rather than in R&D: you will research live customer and partner environments for risk, own threat intelligence for the go-to-market team, and build the tooling that makes every evaluation faster.
About Zafran:
Our Mission: To stop the exploitation of vulnerabilities, everywhere.
What makes us different: In a world where AI-enabled attackers weaponize vulnerabilities within minutes, the old scan-and-patch-everything model no longer holds. Zafran's Exposure Graph continuously maps every vulnerability across your hybrid environment, chains exploitability through real attack paths and proves 90% of "critical" vulnerabilities can't actually reach you. It then neutralizes the real 10% using your compensating controls and safely remediates only where it matters.
Who’s behind us: Zafran is backed by Menlo Ventures, Sequoia Capital, Cyberstarts, and a deep belief that cybersecurity should move as fast as attackers do. We’re one of the fastest-growing companies in the industry, scaling to meet demand from the world’s most advanced, security-obsessed organizations.
What you will do:
Build and maintain the tooling the field runs on - scripts, automations, and data utilities that shorten POV setup and remove manual work from the Sales Engineering team.
Partner with Sales Engineers to stand up Proofs of Value: tenant configuration, integration scoping, data validation, and instrumentation of success criteria.
Bring in customer data. Connect the customer's existing security stack, validate coverage and data quality, and resolve the ingestion issues that quietly stall evaluations.
Research customer and partner environments for risk. Analyze vulnerability posture, deployed security controls, and exposure paths to separate what is genuinely exploitable from what is already mitigated by controls the customer already owns.
Own threat intelligence for the go-to-market organization. Track emerging CVEs and active exploitation campaigns, drive rapid response when something breaks in the news, and arm the field with a credible answer within hours.
Present findings directly to customer security teams, and back up Sales Engineers when a conversation needs research depth.
Collaborate with Product, R&D, and Research - feeding field findings, data gaps, and detection misses back with the specifics needed to act on them, and validating new mitigation logic against real customer data.
Requirements:
3+ years of experience in cybersecurity, with a proven track record in research analysis, threat intelligence, threat detection engineering, or threat hunting.
Ability to collect, process, analyze, and interpret large and imperfect datasets to derive actionable insights, and to reach a conclusion you can defend under challenge.
Proficiency in programming/scripting languages, with a default instinct to automate a repetitive problem rather than repeat it.
Working knowledge of enterprise security controls - EDR, NGFW, WAF, CNAPP and cloud security, vulnerability scanners - and how each one actually mitigates risk in practice.
Experience with network/security-related data analysis.
Proficiency in SQL and TCP/IP network fundamentals.
Comfort working directly with customers. You can hold technical ground with a skeptical security team and explain a finding clearly instead of hiding behind jargon.
Strong team player with excellent collaboration skills, and experience managing multi-departmental interactions with cybersecurity professionals, engineering teams, and product managers.
Self-directed, low-ego, and comfortable with ambiguity and the pace of a fast-growing startup.
Experience with the following is a plus:
Extensive experience in GO/Python programming languages
Pre-sales, professional services, or another customer-facing technical role
Building internal tooling or automation for a field or go-to-market team
Agentic and LLM-based workflows, and MCP-style integrations
Prior experience at an early-stage security startup
At Zafran, people matter! We provide a robust benefits program that includes flexible PTO, health insurance plans (medical, dental, vision), a monthly stipend for phone and internet, 401k, flexible spending account, and a home office stipend when joining!
We also provide access to frontier AI models, including Claude, so every employee can work smarter, move faster, and build an AI-first career from day one.
At Zafran, we’re proud to be an equal opportunity employer. We believe the best teams are built by people who think differently, come from all kinds of backgrounds, and aren’t afraid to challenge the status quo. We welcome everyone across race, religion, gender, gender identity or expression, sexual orientation, age, disability, national origin, and veteran status, because what matters most is what you bring to the table.
If you’re curious, fun, and someone who gets things done, we’d love to meet you
Company information
Zafran Security is a cybersecurity startup specializing in vulnerability prioritization and threat exposure management, aiming to identify, remediate, and mitigate risks within organizations. The AI-native exposure management platform developed by the company aims to proactively avert the exploitation of vulnerabilities by incorporating autonomous agents throughout all stages of the vulnerability management lifecycle. With threat actors rapidly exploiting newly revealed security vulnerabilities through AI automation, Zafran's platform enables organizations to take action before these vulnerabilities result in incidents. The company’s solutions work alongside current security tools, utilizing AI agents to pinpoint weaknesses, provide contextual information, and address these issues by linking them to controls and evaluating the potential for exploitation.
