Cyber Security Analyst, Sales Engineering

Zafran Security; United States; On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Flexible PTO

Health insurance (medical, dental, vis

Phone & internet stipend

401k

Flexible spending account

Home office stipend

Job summary

Zafran Security is seeking an experienced Cyber Security Analyst to join the Sales Engineering organization. You will research live customer environments for risk, own threat intelligence for the go-to-market team, and build tooling that speeds evaluations.

You will work with customers directly, demonstrate value, and help tailor security controls based on real data. You will develop scripts and data utilities, integrate customer security stacks, and collaborate across Product, R&D, and

Qualifications

• 3+ years of experience in cybersecurity or related fields.
• Ability to collect, process, analyze, and interpret large datasets for actionable insights.
• Proficiency in programming/scripting with a bias toward automation.
• Working knowledge of enterprise security controls (EDR, NGFW, WAF, CNAPP, cloud security).
• Experience with network/security data analysis and TCP/IP basics.
• Comfort presenting findings to customer security teams and cross-functional groups.
• Strong collaboration skills and ability to manage multi-department interactions.
• Self-directed and comfortable with ambiguity in a fast-growing startup.

Responsibilities

• Build and maintain field tooling—scripts, automations, and data utilities to shorten POV setup.
• Partner with Sales Engineers to configure proofs of value and validate data quality.
• Ingest customer data, integrate security stacks, and resolve data ingestion issues.
• Assess customer environments for risk, separating exploitable gaps from mitigated ones.
• Own threat intelligence for go-to-market, tracking CVEs and active campaigns.
• Present findings to customer security teams and support Sales Engineers with depth.
• Collaborate with Product, R&D, and Research to feed field findings and validate mitigation logic.

Skills

Threat intelligence

Data analysis

Programming/scripting

Security controls

SQL

TCP/IP

Customer communication

Team collaboration

Self-directed

Tools

Go

Python

Job description

Description

Zafran is actively looking for an experienced Cyber Security Analyst to join the Sales Engineering organization at our dynamic cybersecurity startup. We are looking for an individual who thrives on unraveling the intricacies of computing environments and attackers' techniques, and who turns that understanding into tooling, data, and evidence our customers can act on. This role sits with the field rather than in R&D: you will research live customer and partner environments for risk, own threat intelligence for the go-to-market team, and build the tooling that makes every evaluation faster.

About Zafran:

Our Mission:

To stop the exploitation of vulnerabilities, everywhere.

What makes us different:

In a world where AI-enabled attackers weaponize vulnerabilities within minutes, the old scan-and-patch-everything model no longer holds. Zafran's Exposure Graph continuously maps every vulnerability across your hybrid environment, chains exploitability through real attack paths and proves 90% of "critical" vulnerabilities can't actually reach you. It then neutralizes the real 10% using your compensating controls and safely remediates only where it matters.

Who’s behind us

Zafran is backed by Menlo Ventures, Sequoia Capital, Cyberstarts, and a deep belief that cybersecurity should move as fast as attackers do. We’re one of the fastest-growing companies in the industry, scaling to meet demand from the world’s most advanced, security-obsessed organizations.

What you will do:

• Build and maintain the tooling the field runs on - scripts, automations, and data utilities that shorten POV setup and remove manual work from the Sales Engineering team.

• Partner with Sales Engineers to stand up Proofs of Value: tenant configuration, integration scoping, data validation, and instrumentation of success criteria.

• Bring in customer data. Connect the customer's existing security stack, validate coverage and data quality, and resolve the ingestion issues that quietly stall evaluations.

• Research customer and partner environments for risk. Analyze vulnerability posture, deployed security controls, and exposure paths to separate what is genuinely exploitable from what is already mitigated by controls the customer already owns.

• Own threat intelligence for the go-to-market organization. Track emerging CVEs and active exploitation campaigns, drive rapid response when something breaks in the news, and arm the field with a credible answer within hours.

• Present findings directly to customer security teams, and back up Sales Engineers when a conversation needs research depth.

• Collaborate with Product, R&D, and Research - feeding field findings, data gaps, and detection misses back with the specifics needed to act on them, and validating new mitigation logic against real customer data.

Requirements:

• 3+ years of experience in cybersecurity, with a proven track record in research analysis, threat intelligence, threat detection engineering, or threat hunting.

• Ability to collect, process, analyze, and interpret large and imperfect datasets to derive actionable insights, and to reach a conclusion you can defend under challenge.

• Proficiency in programming/scripting languages, with a default instinct to automate a repetitive problem rather than repeat it.

• Working knowledge of enterprise security controls - EDR, NGFW, WAF, CNAPP and cloud security, vulnerability scanners - and how each one actually mitigates risk in practice.

• Experience with network/security-related data analysis.

• Proficiency in SQL and TCP/IP network fundamentals.

• Comfort working directly with customers. You can hold technical ground with a skeptical security team and explain a finding clearly instead of hiding behind jargon.

• Strong team player with excellent collaboration skills, and experience managing multi-departmental interactions with cybersecurity professionals, engineering teams, and product managers.

• Self-directed, low-ego, and comfortable with ambiguity and the pace of a fast-growing startup.

Experience with the following is a plus:

• Extensive experience in GO/Python programming languages

• Pre-sales, professional services, or another customer-facing technical role

• Building internal tooling or automation for a field or go-to-market team

• Agentic and LLM-based workflows, and MCP-style integrations

• Prior experience at an early-stage security startup

At Zafran, people matter! We provide a robust benefits program that includes flexible PTO, health insurance plans (medical, dental, vision), a monthly stipend for phone and internet, 401k, flexible spending account, and a home office stipend when joining!

We also provide access to frontier AI models, including Claude, so every employee can work smarter, move faster, and build an AI-first career from day one.

At Zafran, we’re proud to be an equal opportunity employer.

We believe the best teams are built by people who think differently, come from all kinds of backgrounds, and aren’t afraid to challenge the status quo. We welcome everyone across race, religion, gender, gender identity or expression, sexual orientation, age, disability, national origin, and veteran status, because what matters most is what you bring to the table.

If you’re curious, fun, and someone who gets things done, we’d love to meet you