---
title: 'ServiceNow Application Engineer - Workflows Team at Zafran Security'
canonical: 'https://feeny.ai/job/servicenow-application-engineer-workflows-team-zafran-security-tel-aviv-q1mbmbc69zhy'
type: 'job'
last_seen: '2026-10-14'
---

# ServiceNow Application Engineer - Workflows Team at Zafran Security

- **Company:** Zafran Security
- **Location:** Tel Aviv, Israel
- **Employment:** full-time
- **Work type:** onsite
- **Posted:** 2026-09-28
- **Last confirmed live:** 2026-10-14
- **Apply:** https://jobs.ashbyhq.com/zafran-security/62b02f77-ef83-4bcb-b5ee-330a247085a5

## Job description

Zafran's ServiceNow application is on the ServiceNow Store and is how a large part of our enterprise customer base experiences our product day to day. It has been built and maintained by an external partner; we are bringing it in-house. You would be the first ServiceNow engineer at Zafran and the owner of that application end to end — architecture, roadmap, code, certification, releases, and customer escalations. This is a product engineering role, not a platform administration or consulting role. You are not implementing ServiceNow for internal users; you are shipping a certified commercial application that installs into instances you do not control, at organizations whose configurations and data volumes you cannot predict. The work is substantially independent, with real ownership over technical direction, and sits close to both our product team and our customers' security operations teams

About Zafran: Our Mission: To stop the exploitation of vulnerabilities, everywhere. What makes us different: Zafran de-risks 90% of critical vulnerabilities overnight across your hybrid environment and utilizes Agentic Capabilities and your existing security tools to rapidly mitigate and remediate the 10% most likely to be exploited. Who's behind us: Zafran is backed by Menlo Ventures, Sequoia Capital, Cyberstarts, and a deep belief that cybersecurity should move as fast as attackers do. We're one of the fastest-growing companies in the industry, scaling to meet demand from the world's most advanced, security-obsessed organizations. We're serious about our mission- so expect work that matters, teammates who challenge and inspire you, and plenty of fun along the way!

## What you'll own

- Architecture, development, and maintenance of Zafran's scoped ServiceNow application
- Integration between Zafran's platform and ServiceNow — data ingestion, correlation of findings to configuration items, remediation workflows, and bidirectional sync
- Alignment with the Vulnerability Response / Unified Security Exposure Management data model, and the migration path as customers move onto USEM
- The full ServiceNow Store certification cycle: building to certification requirements, passing security and performance review, maintaining design documentation, and shepherding each submission through the review process
- Release currency — ServiceNow ships two major releases a year and requires supported apps to stay within the n-3 window. You own that calendar.
- Versioning and upgrade paths: shipping new versions without breaking existing customers, including migration logic where the data model changes
- Automated testing (ATF and beyond), source control, and release engineering for the application
- Technical escalations from customers' ServiceNow administrators, and the technical side of pre-sales conversations when a prospect's ServiceNow team has hard questions
- Transition and knowledge transfer from our current external development partner

Required

- 5+ years building on ServiceNow, with substantial scoped application development
- 5+ years of hands-on experience in backend development with languages such as Golang, Python, Java, JavaScript, or C/C++
- The ability to quickly learn and adapt to new technologies as needed
- Strong problem-solving, sense of ownership and communication skills, with the ability to work well in a team environment
- 5+ years of experience, in at least 2 positions
- Mentality of a team player, with a capability to see the big picture, and use it to focus on critical detail
- Capability and will to take responsibility and have a deep influence
- Experience shipping at least one application to the ServiceNow Store and taking it through certification — ideally including at least one recertification for a new release family
- Strong server-side JavaScript / Glide scripting; Scripted REST APIs, IntegrationHub, Flow Designer
- Solid CMDB knowledge, including CI identification and reconciliation, and familiarity with CSDM
- Experience with source control and automated testing for ServiceNow applications, not just update-set-driven development
- Comfortable owning a shipped product surface: versioning, backward compatibility, release notes, upgrade paths, and direct customer support
- Defensive engineering instincts for code that runs in environments you cannot inspect — unknown customizations, unexpected data volumes, partial failures, rate limits, and retries
- Clear written communication with customers' technical teams

Strongly preferred

- Hands-on experience with ServiceNow Vulnerability Response, Unified Security Exposure Management, or Security Operations — particularly third-party integrations built on the VR integration framework
- Prior work at an ISV or technology vendor with a listing on the ServiceNow Store
- Service Graph Connectors
- MID Server architecture, especially for customers with on-premises or network-restricted deployments
- Certified Application Developer (CAD)
- CIS–Vulnerability Response

## Nice to have

- Security background more broadly — vulnerability management, exposure management, or SOC workflows
- Experience with domain-separated instances as a deployment target (MSPs and large enterprises may install our app; it needs to behave correctly there)
- Experience running a partner relationship with ServiceNow's Build Partner / Technology Partner Program

## About Zafran Security

## Company Overview
- **One-liner**: Zafran Security provides an AI-native Threat Exposure Management platform that unifies vulnerability data, assesses exploitability in context, and automates mitigation and remediation using existing security controls.
- **Entity Type**: Private (Series C)
- **Headquarters**: New York, New York, United States [linkedin.com]
- **Founded**: 2023 (inferred from initial seed funding in early 2024) [linkedin.com]
- **Founders**: Sanaz Yashar (CEO) and Ben Seri (CTO) [zafran.io/about]

## Core Business
- **Primary industry**: Cybersecurity (vulnerability / exposure management)
- **Target customers**: Enterprise security teams (Fortune 500 and high-growth companies) [zafran.io/platform]
- **Mission or purpose statement**: “Proactively stop the exploitation of vulnerabilities, everywhere.” [zafran.io/about]

## Products & Services
- **Zafran Threat Exposure Management Platform** (SaaS / agentic): End-to-end platform that unifies findings across cloud, on-prem, and AppSec; assesses risk using runtime presence, reachability, exploitability, asset criticality, and existing controls; enables proactive exposure hunting; provides mitigation guidance that leverages compensating controls; and automates remediation via RemOps (generative AI‑powered remediation operations). [zafran.io/platform]
- **Zafran Detector** (released Aug 2025): Continuous vulnerability discovery tool that supplements existing scanners. [linkedin.com]
- **Agentic Remediation™**: AI agents that research CVE conditions, validate exploitability on live assets, generate remediation scripts, and maintain human oversight with approval workflows. [zafran.io/platform]

## Market Standing
- **Valuation/Market Cap**: Not disclosed (private company)
- **Key Metric**: Total funding of $105.5M as of December 2025. Breakdown: Seed $5.5M (Mar 2024), Series B $40M (Sep 2024, led by Sequoia Capital and Cyberstarts), Series C $60M (Dec 2025, led by Menlo Ventures). [linkedin.com]
- **Notable Investors/Partners**: Sequoia Capital (Doug Leone on board), Cyberstarts (Lior Simon on board), Menlo Ventures (Rama Sekhar on board), Amex Ventures (strategic investor in 2026). Included in Microsoft for Startups Pegasus Program. [zafran.io/about, linkedin.com]
- **Growth Signals**: 132 employees (51% YoY growth, +58 people); 30 open positions as of mid‑2026; monthly job postings up 57.9% YoY; expansion across US, Israel, Germany, and UK. [linkedin.com]

## Competitive Advantages
- **AI-native, context-aware analysis**: Applies each customer’s unique asset criticality, runtime presence, and existing control stack to determine which vulnerabilities are truly exploitable – eliminating up to 90% of critical false positives. [zafran.io/platform]
- **Leverages existing defenses**: Rather than demanding new agents or patch‑only fixes, Zafran maps exposures to compensating controls and provides step‑by‑step mitigation guidance, shrinking exposure windows before patching begins. [zafran.io/platform]
- **Closed‑loop automation**: Agentic Remediation and RemOps reduce manual triage, consolidate overlapping CVEs into single remediation actions, and route work automatically via ticketing integrations. [zafran.io/platform]
- **Founding team with breach‑response experience**: Co‑founders directly investigated breaches resulting from known vulnerabilities, giving the product a practitioner‑driven design. [zafran.io/about]

## Strategic Focus
- **Scale the platform’s adoption among large enterprises** (Fortune 500) and expand the partner ecosystem.
- **Continue product innovation** – recent launches include the Zafran Detector and RemOps; ongoing development of agentic capabilities.
- **Global talent acquisition** – aggressive hiring across engineering, sales, and customer success to support 50%+ headcount growth.

## Why Work Here
- **Culture**: Founded by cybersecurity practitioners who understand the pain of manual vulnerability management. Emphasis on “clarity and speed” and building solutions that make defenders more effective. [zafran.io/about]
- **Work model**: Hybrid – offices in New York, Tel Aviv (Israel), and presence in Germany and the UK. Remote options for certain roles (e.g., Channel Manager listed as Remote – CST). [linkedin.com, zafran.io/careers]
- **Notable perks / engineering culture**: High ratio of technical staff (40% of known department breakdown); talent drawn from top security companies (Palo Alto Networks, Tenable, Armis, Microsoft). The company values “customer” focus and “building” as core principles. [linkedin.com]
- **Growth opportunity**: Joining at a Series C stage with proven product‑market fit and a clear path to scale – an ideal time for impact.

## Sources
1. [zafran.io](https://www.zafran.io/)
2. [zafran.io/about](https://www.zafran.io/about)
3. [zafran.io/platform](https://www.zafran.io/platform)
4. [zafran.io/careers](https://www.zafran.io/careers)
5. [linkedin.com/company/zafran-security](https://www.linkedin.com/company/zafran-security)

## Other roles at Zafran Security

- [Project Manager, Customer Success](https://feeny.ai/job/project-manager-customer-success-zafran-security-united-states-8j40wdz5nwc4) — United States
- [Business Development Representative](https://feeny.ai/job/business-development-representative-zafran-security-new-york-5bb2w3g59ab0) — New York, NY
- [Technical Account Manager](https://feeny.ai/job/technical-account-manager-zafran-security-united-states-bqqbchqws21p) — United States
- [Channel Account Manager (East)](https://feeny.ai/job/channel-account-manager-east-zafran-security-united-states-s2natqgwsk9a) — United States
- [Product Partnerships Manager](https://feeny.ai/job/product-partnerships-manager-zafran-security-tel-aviv-jwx6dk9pk0fa) — Tel Aviv, Israel
- [Data Infra Senior Engineer](https://feeny.ai/job/data-infra-senior-engineer-zafran-security-tel-aviv-2v6gadha390y) — Tel Aviv, Israel
- [Senior DevOps Engineer (NYC)](https://feeny.ai/job/senior-devops-engineer-nyc-zafran-security-united-states-ztax94h9w1hc) — United States
- [Regional Sales Manager, Enterprise (NYC)](https://feeny.ai/job/regional-sales-manager-enterprise-nyc-zafran-security-united-states-r73k9cxjkfzc) — United States
- [AI Team Lead](https://feeny.ai/job/ai-team-lead-zafran-security-tel-aviv-2g4ev1trg3zj) — Tel Aviv, Israel
- [Senior Manager, Field & Event Marketing](https://feeny.ai/job/senior-manager-field-event-marketing-zafran-security-chicago-eptybcawdjt5) — Chicago, IL