Cyber Security Analyst, Sales Engineering

Zafran Security is a cybersecurity startup focused on preventing the exploitation of vulnerabilities across hybrid environments. The Cyber Security Analyst will support Sales Engineering by building field tooling, standing up customer Proofs of Value, analyzing security data and exposure paths, and owning threat intelligence for the go-to-market organization.

Responsibilities:

• Build and maintain the tooling the field runs on - scripts, automations, and data utilities that shorten POV setup and remove manual work from the Sales Engineering team
• Partner with Sales Engineers to stand up Proofs of Value: tenant configuration, integration scoping, data validation, and instrumentation of success criteria
• Bring in customer data. Connect the customer's existing security stack, validate coverage and data quality, and resolve the ingestion issues that quietly stall evaluations
• Research customer and partner environments for risk. Analyze vulnerability posture, deployed security controls, and exposure paths to separate what is genuinely exploitable from what is already mitigated by controls the customer already owns
• Own threat intelligence for the go-to-market organization. Track emerging CVEs and active exploitation campaigns, drive rapid response when something breaks in the news, and arm the field with a credible answer within hours
• Present findings directly to customer security teams, and back up Sales Engineers when a conversation needs research depth
• Collaborate with Product, R&D, and Research - feeding field findings, data gaps, and detection misses back with the specifics needed to act on them, and validating new mitigation logic against real customer data

Requirements:

• 3+ years of experience in cybersecurity, with a proven track record in research analysis, threat intelligence, threat detection engineering, or threat hunting
• Ability to collect, process, analyze, and interpret large and imperfect datasets to derive actionable insights, and to reach a conclusion you can defend under challenge
• Proficiency in programming/scripting languages, with a default instinct to automate a repetitive problem rather than repeat it
• Working knowledge of enterprise security controls - EDR, NGFW, WAF, CNAPP and cloud security, vulnerability scanners - and how each one actually mitigates risk in practice
• Experience with network/security-related data analysis
• Proficiency in SQL and TCP/IP network fundamentals
• Comfort working directly with customers. You can hold technical ground with a skeptical security team and explain a finding clearly instead of hiding behind jargon
• Strong team player with excellent collaboration skills, and experience managing multi-departmental interactions with cybersecurity professionals, engineering teams, and product managers
• Self-directed, low-ego, and comfortable with ambiguity and the pace of a fast-growing startup
• Extensive experience in GO/Python programming languages
• Pre-sales, professional services, or another customer-facing technical role
• Building internal tooling or automation for a field or go-to-market team
• Agentic and LLM-based workflows, and MCP-style integrations
• Prior experience at an early-stage security startup