--- title: 'Security Researcher at Zafran Security' canonical: 'https://feeny.ai/job/security-researcher-zafran-security-tel-aviv-q0t1sdpdf3ps' type: 'job' last_seen: '2026-09-09' --- # Security Researcher at Zafran Security - **Company:** Zafran Security - **Location:** Tel Aviv, Israel - **Employment:** full-time - **Work type:** onsite - **Posted:** 2026-08-20 - **Last confirmed live:** 2026-09-09 - **Apply:** https://jobs.ashbyhq.com/zafran-security/246ae954-d395-45ab-82c9-28b15d1fb6c4/application **Skills:** Vulnerability Research, Reverse Engineering, Low-level Binary Analysis, AI Security, Cloud Security, CVE Analysis, Technical Blogging, Security Conference Presentations > The Security Researcher will conduct vulnerability research for open-source projects and low-level binaries, focusing on AI security and product security. The role involves reverse engineering, analyzing internal code, and publishing technical blogs to support PR efforts and improve the company's security posture. ## Job description Zafran is looking for an experienced Security Researcher to join our growing research team. The team's responsibility is vulnerability research for both PR purposes and research for Zafran’s product. In this role, you will focus on vulnerability research of open-source projects and reverse engineering of low-level binaries. The team also focuses on AI security and low-level product security research. A key part of your work will include analyzing internal code and identifying security risks to improve Zafran’s overall security posture and support our PR efforts. About Zafran: Our Mission: To stop the exploitation of vulnerabilities, everywhere. What makes us different: Zafran de-risks 90% of critical vulnerabilities overnight across your hybrid environment and utilizes Agentic Capabilities and your existing security tools to rapidly mitigate and remediate the 10% most likely to be exploited. Who’s behind us: Zafran is backed by Menlo Ventures, Sequoia Capital, Cyberstarts, and a deep belief that cybersecurity should move as fast as attackers do. We’re one of the fastest-growing companies in the industry, scaling to meet demand from the world’s most advanced, security-obsessed organizations. We’re serious about our mission- so expect work that matters, teammates who challenge and inspire you, and plenty of fun along the way! What you will do: - Vulnerability Discovery: Research and discover vulnerabilities across AI applications, low-level products, and cloud environments, including the development of functional Proofs-of-Concept (PoCs). - Public Research & PR: Publish technical blogs and present your research at major security conferences. - Technical Product Research: Produce in-depth technical research and conduct reverse engineering of security products to directly support the development of Zafran’s product and platform. - Stay up to date with newly discovered CVEs, attack techniques, and threat trends - Cross-Functional Collaboration: Partner with product and engineering teams to help improve Zafran’s security. ## Requirements - 5+ years of hands-on experience in security research, including a track record of finding vulnerabilities in complex systems.. - Strong understanding of vulnerabilities, exploit techniques, and attack vectors. - Experience in reverse engineering binaries, security products, and complex low-level systems. - Hands-on experience with Linux systems, networking, and cloud environments - Ability to analyze complex systems and think like an attacker - Strong written communication skills in English, including technical documentation. - Self-driven, curious, and passionate about security research ## Experience with the following is a plus - Experience contributing to blogs, public research, conference talks, or media-facing security content - Familiarity with AI systems, AI security, and model behavior. - Experience in software development. ## About Zafran Security ## Company Overview - **One-liner**: Zafran Security provides an AI-native Threat Exposure Management platform that unifies vulnerability data, assesses exploitability in context, and automates mitigation and remediation using existing security controls. - **Entity Type**: Private (Series C) - **Headquarters**: New York, New York, United States [linkedin.com] - **Founded**: 2023 (inferred from initial seed funding in early 2024) [linkedin.com] - **Founders**: Sanaz Yashar (CEO) and Ben Seri (CTO) [zafran.io/about] ## Core Business - **Primary industry**: Cybersecurity (vulnerability / exposure management) - **Target customers**: Enterprise security teams (Fortune 500 and high-growth companies) [zafran.io/platform] - **Mission or purpose statement**: “Proactively stop the exploitation of vulnerabilities, everywhere.” [zafran.io/about] ## Products & Services - **Zafran Threat Exposure Management Platform** (SaaS / agentic): End-to-end platform that unifies findings across cloud, on-prem, and AppSec; assesses risk using runtime presence, reachability, exploitability, asset criticality, and existing controls; enables proactive exposure hunting; provides mitigation guidance that leverages compensating controls; and automates remediation via RemOps (generative AI‑powered remediation operations). [zafran.io/platform] - **Zafran Detector** (released Aug 2025): Continuous vulnerability discovery tool that supplements existing scanners. [linkedin.com] - **Agentic Remediation™**: AI agents that research CVE conditions, validate exploitability on live assets, generate remediation scripts, and maintain human oversight with approval workflows. [zafran.io/platform] ## Market Standing - **Valuation/Market Cap**: Not disclosed (private company) - **Key Metric**: Total funding of $105.5M as of December 2025. Breakdown: Seed $5.5M (Mar 2024), Series B $40M (Sep 2024, led by Sequoia Capital and Cyberstarts), Series C $60M (Dec 2025, led by Menlo Ventures). [linkedin.com] - **Notable Investors/Partners**: Sequoia Capital (Doug Leone on board), Cyberstarts (Lior Simon on board), Menlo Ventures (Rama Sekhar on board), Amex Ventures (strategic investor in 2026). Included in Microsoft for Startups Pegasus Program. [zafran.io/about, linkedin.com] - **Growth Signals**: 132 employees (51% YoY growth, +58 people); 30 open positions as of mid‑2026; monthly job postings up 57.9% YoY; expansion across US, Israel, Germany, and UK. [linkedin.com] ## Competitive Advantages - **AI-native, context-aware analysis**: Applies each customer’s unique asset criticality, runtime presence, and existing control stack to determine which vulnerabilities are truly exploitable – eliminating up to 90% of critical false positives. [zafran.io/platform] - **Leverages existing defenses**: Rather than demanding new agents or patch‑only fixes, Zafran maps exposures to compensating controls and provides step‑by‑step mitigation guidance, shrinking exposure windows before patching begins. [zafran.io/platform] - **Closed‑loop automation**: Agentic Remediation and RemOps reduce manual triage, consolidate overlapping CVEs into single remediation actions, and route work automatically via ticketing integrations. [zafran.io/platform] - **Founding team with breach‑response experience**: Co‑founders directly investigated breaches resulting from known vulnerabilities, giving the product a practitioner‑driven design. [zafran.io/about] ## Strategic Focus - **Scale the platform’s adoption among large enterprises** (Fortune 500) and expand the partner ecosystem. - **Continue product innovation** – recent launches include the Zafran Detector and RemOps; ongoing development of agentic capabilities. - **Global talent acquisition** – aggressive hiring across engineering, sales, and customer success to support 50%+ headcount growth. ## Why Work Here - **Culture**: Founded by cybersecurity practitioners who understand the pain of manual vulnerability management. Emphasis on “clarity and speed” and building solutions that make defenders more effective. [zafran.io/about] - **Work model**: Hybrid – offices in New York, Tel Aviv (Israel), and presence in Germany and the UK. Remote options for certain roles (e.g., Channel Manager listed as Remote – CST). [linkedin.com, zafran.io/careers] - **Notable perks / engineering culture**: High ratio of technical staff (40% of known department breakdown); talent drawn from top security companies (Palo Alto Networks, Tenable, Armis, Microsoft). The company values “customer” focus and “building” as core principles. [linkedin.com] - **Growth opportunity**: Joining at a Series C stage with proven product‑market fit and a clear path to scale – an ideal time for impact. ## Sources 1. [zafran.io](https://www.zafran.io/) 2. [zafran.io/about](https://www.zafran.io/about) 3. [zafran.io/platform](https://www.zafran.io/platform) 4. [zafran.io/careers](https://www.zafran.io/careers) 5. [linkedin.com/company/zafran-security](https://www.linkedin.com/company/zafran-security) ## Other roles at Zafran Security - [Regional Sales Manager, Enterprise (NYC)](https://feeny.ai/job/regional-sales-manager-enterprise-nyc-zafran-security-united-states-r73k9cxjkfzc) — United States - [AI Team Lead](https://feeny.ai/job/ai-team-lead-zafran-security-tel-aviv-2g4ev1trg3zj) — Tel Aviv, Israel - [Senior Manager, Field & Event Marketing](https://feeny.ai/job/senior-manager-field-event-marketing-zafran-security-chicago-eptybcawdjt5) — Chicago, IL - [Cyber Security Analyst, Sales Engineering](https://feeny.ai/job/cyber-security-analyst-sales-engineering-zafran-security-united-states-zxzwsxgcdy9d) — United States - [HR Business Partner](https://feeny.ai/job/hr-business-partner-zafran-security-united-states-jb8t71jqdysf) — United States - [Director of Alliances](https://feeny.ai/job/director-of-alliances-zafran-security-united-states-0wr0b9h3art6) — United States - [Director of Sales, Enterprise](https://feeny.ai/job/director-of-sales-enterprise-zafran-security-united-states-5nt55sj17ynz) — United States - [Regional Sales Manager, Enterprise (Greater San Diego)](https://feeny.ai/job/regional-sales-manager-enterprise-greater-san-diego-zafran-security-united-ss6z0z69s3kh) — United States - [Query Infra Team Lead](https://feeny.ai/job/query-infra-team-lead-zafran-security-tel-aviv-s8rqs5fvx57v) — Tel Aviv, Israel - [Senior Talent Acquisition Partner](https://feeny.ai/job/senior-talent-acquisition-partner-zafran-security-tel-aviv-wkj3gzx8sknk) — Tel Aviv, Israel