Refolk
Open nowEngineeringR&D

Senior AI Engineer

Zafran Security · Tel Aviv, Gush Dan

Location
Tel Aviv, Gush Dan, Israel
Employment
Full time
Level
Senior
Posted
2 November

About this role

Zafran is building the next generation of vulnerability and risk management. We bring together complex security data and turn it into clear investigation, prioritization, and action.

We're creating a new AI team to build the shared infrastructure, tools, and standards that enable teams across R&D to develop reliable AI-powered capabilities. The team will also own and deliver core AI experiences used across Zafran's platform and organization.

About Zafran:

Our Mission: To stop the exploitation of vulnerabilities, everywhere.

What makes us different: Zafran de-risks 90% of critical vulnerabilities overnight across your hybrid environment, leveraging Agentic Capabilities and your existing security tools to rapidly mitigate and remediate the 10% most likely to be exploited.

​​Who’s behind us: Zafran is backed by Menlo Ventures, Sequoia Capital, Cyberstarts, and a deep belief that cybersecurity should move as fast as attackers do. We’re one of the fastest-growing companies in the industry, scaling to meet demand from the world’s most advanced, security-obsessed organizations.

We’re serious about our mission- so expect work that matters, teammates who challenge and inspire you, and plenty of fun along the way!

We're looking for a Senior AI Engineer to be one of the team's first engineers and to own Zafran's AI infrastructure end to end - the shared platform every R&D team uses to build, test, ship, and monitor AI features. That platform powers our in-product AI assistant, our background agents, and every AI capability still to come. You'll set the standard for how AI runs in production at Zafran: when a team ships an AI feature, it should be reliable, secure, observable, and cost-efficient by default - because your platform made it that way.

What you will do:

  • Own the AI platform. Design, build, and run the shared agent runtime: model access, tool use, memory and sessions, streaming, and human approval for sensitive actions.

  • Production-grade. Scaling, fallback between model providers, rate limits, timeouts, and safe rollouts on Kubernetes.

  • Own evaluation. Build the evaluation framework every team uses to measure quality, correctness, latency, and cost - and catch regressions in CI before customers do.

  • Own observability and cost. Tracing for every agent run and tool call, token spend per tenant and per feature, and alerts when quality or cost drifts.

  • Own AI security. Strict tenant isolation, defenses against prompt injection, and guarded data access across a multi-tenant security platform.

  • Build the tool layer. MCP tools and data connectors that let agents query our security data safely and reliably.

  • Enable R&D. Shared libraries, templates, and docs so other teams can build, test, deploy, and monitor AI features independently.

  • Stay hands-on with architecture, implementation, and production issues, and help raise the AI engineering bar across R&D.

Requirements:

  • 5+ years of backend or infrastructure engineering, with strong system design skills.

  • Proven experience building and operating production-grade AI / LLM infrastructure - real users, real traffic, real incidents. Not prototypes.

  • Deep hands-on experience with agentic systems: tool use, structured outputs, prompt and context management, retrieval, and long-running or streaming flows.

  • Experience designing and running LLM evaluations at scale.

  • Strong Python skills.

  • Production experience on AWS and Kubernetes, including observability (tracing, metrics, logs).

  • Ownership mindset - you treat the platform as a product and other engineers as your customers.

Experience with the following is a plus:

  • Experience with Amazon Bedrock, Strands Agents, LiteLLM, MCP, or OpenTelemetry (our current stack).

  • Experience building internal developer infrastructure used by multiple engineering teams.

  • Experience with model evaluation, safety controls, governance, or LLM security (guardrails, prompt injection).

  • Experience operating multi-tenant SaaS systems.

  • Background in cybersecurity or security-data products.

  • Familiarity with Go, ElasticSearch, ClickHouse, or Postgres.

Why this role matters:

AI is a shared capability across Zafran's products and engineering organization. As the owner of the AI infrastructure, you'll build the foundation that lets every R&D team ship AI features faster and more safely - and shape Zafran's AI architecture from the ground up.

As published by Zafran Security. Applications are handled on their site.

Skills this posting mentions

KubernetesInfrastructureObservability

About Zafran Security

Zafran is an AI-native exposure management platform that eliminates the manual toil of vulnerability management by cutting through noise, revealing what is truly exploitable, and automating mitigation and remediation using the security controls teams already have. We are a team of practitioners and builders shaped by high-stakes security moments, where clarity and speed mattered, and manual processes came at a real cost. We’re on a mission to proactively stop the exploitation of vulnerabilities, everywhere.

All 33 openings at Zafran Security

One click, then it is written

Apply to Zafran Security with a resume written for this role.

Queue Senior AI Engineer and I read the posting, rewrite your resume against it, draft the cover letter, and score the fit. Then you press send, or press one button and I fill in Zafran Security’s form for you.

  1. 01Drop your resume

    A PDF or a LinkedIn URL. About a minute, once.

  2. 02I rank the openings

    Every weekday morning, the live catalog scored against your history. Up to 20 worth your time, not two hundred links.

  3. 03Each one is written up

    Resume rewritten for the posting, a cover letter, a fit score. Press send, or let me fill in the form.

  • 25 sent a week, free
  • No card
  • Nothing sent until you say so

More roles at Zafran Security

See all

Similar roles elsewhere

See more

Put this to work

Paste your career in once. Every application after that is written for you.

Drop a resume or a LinkedIn URL. I rank the live openings against it, rewrite the resume and write a cover letter for the best of them, and fill in the employer's form when you press the button. You read, you decide what goes out.

  1. 01Drop your resume

    A PDF or a LinkedIn URL. About a minute, once.

  2. 02I rank the openings

    Every weekday morning, the live catalog scored against your history. Up to 20 worth your time, not two hundred links.

  3. 03Each one is written up

    Resume rewritten for the posting, a cover letter, a fit score. Press send, or let me fill in the form.

  • New matches ranked and written before you are up.
  • Every bullet stays inside what your history supports. Nothing invented.
  • Queued, submitted, interviewing, offer: one screen, not a spreadsheet.

Free, no card. Up to 25 applications sent a week, and nothing is sent until you say so.

Listed from the job board Zafran Security publishes. Refolk is not the employer and does not handle their hiring. Applications go to Zafran Security directly.

Hiring at Zafran Security? Post this role to the Refolk talent pool for $299, once. No commission, refunded if I find nobody. Post a role for $299