Business Value Engineer

Zafran.io•New York, NY

About The Position

Zafran is on a mission to stop the exploitation of vulnerabilities everywhere. We’re transforming how security teams prioritize and reduce risk, moving beyond legacy vulnerability management toward a Continuous Threat Exposure Management (CTEM) operating model that actually works in the real world. We are looking for a Value Engineer to help customers understand and quantify the business impact of Zafran. In this role, you will work closely with sales and security leaders to analyze security operations, identify exposure management challenges, and build clear ROI and value models. You will translate technical security outcomes into compelling narratives for CISOs and executive stakeholders. About Zafran: Our Mission: To stop the exploitation of vulnerabilities, everywhere. What makes us different: Zafran de-risks 90% of critical vulnerabilities overnight across your hybrid environment and utilizes Agentic Capabilities and your existing security tools to rapidly mitigate and remediate the 10% most likely to be exploited. Who’s behind us: Zafran is backed by Sequoia Capital, Cyberstarts, and a deep belief that cybersecurity should move as fast as attackers do. We’re one of the fastest-growing companies in the industry, scaling to meet demand from the world’s most advanced, security-obsessed organizations. We’re serious about our mission- so expect work that matters, teammates who challenge and inspire you, and plenty of fun along the way!

Requirements

5+ years of experience in cybersecurity, security consulting, value engineering, or adjacent roles
Strong understanding of security operations, vulnerability management, and exposure management
Experience building ROI, TCO, or outcome-based business cases using security metrics
Ability to communicate with security practitioners and security leadership
Comfortable presenting to CISOs and executive stakeholders

Nice To Haves

Hands-on experience with CTEM, vulnerability management, EASM, or attack path analysis
Familiarity with security KPIs (e.g., MTTR, vulnerability backlog, exposure reduction)
Experience supporting enterprise cybersecurity sales cycles
Background working with or alongside CISO organizations

Responsibilities

Lead business value assessments for strategic cybersecurity deals
Build ROI, TCO, and outcome-based models tied to security workflows and risk reduction
Run discovery sessions with security teams to understand exposure, vulnerability, and remediation challenges
Quantify security outcomes such as attack path reduction, prioritization efficiency, and operational savings
Consider customer priorities, benchmarks, and Zafran-specific value drivers in analyses
Present value findings in executive briefings and strategic customer meetings
Translate technical security outcomes into clear executive narratives
Partner with Sales, SE, CS, and Product Marketing to embed value into the buying journey
Identify opportunities to scale value analysis using automation and AI