{"id":461969,"url":"https://alion.io/job/zafran-security-query-infra-team-lead","title":"Query Infra Team Lead","company":{"id":177893,"name":"Zafran Security","domain":"zafran.io","url":"https://alion.io/company/zafran-security","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"A","score":95,"open_postings":6,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":74,"computed_at":"2026-10-23T05:54:15Z"}},"role":"Management","role_family":"Management","seniority":"lead","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Tel Aviv, Israel"],"countries":["IL"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"Amazon Redshift","optional":false},{"name":"ClickHouse","optional":false},{"name":"ElasticSearch","optional":false},{"name":"Google BigQuery","optional":false},{"name":"OpenSearch","optional":false},{"name":"Snowflake","optional":false},{"name":"Apache Kafka","optional":true},{"name":"SIEM","optional":true}],"status":"live","first_seen_at":"2026-08-23T15:12:40Z","employer_posted_date":"2026-08-23","last_verified_at":"2026-10-23T02:54:41Z","board_verified":true,"closed_at":null,"days_open":60,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":60},"description":"Zafran is building the next generation of vulnerability and risk management. Our platform brings together security, asset, vulnerability, exposure, and business context from many systems - then turns that data into clear investigation, prioritization, and action.\nWe’re creating a new Query Infra to own the investigation infrastructure of Zafran’s data layer for the Platform. This team will take over the infrastructure behind our investigation databases and search capabilities.\nData Infra will own the foundations behind Zafran’s data layer: infrastructure, modeling, performance, reliability, and query capabilities on top of our investigation databases. Other product and engineering teams will build customer-facing experiences, workflows, dashboards, and insights on top of the capabilities this team provides.\nWe’re looking for an experienced Query Infra Team Lead to build and lead this team - someone who comes from deep data infrastructure, analytical databases, search infrastructure, and large-scale querying, and who wants to shape one of the most important technical foundations of Zafran’s platform.\nAbout Zafran:\nOur Mission: To stop the exploitation of vulnerabilities, everywhere.\nWhat makes us different: Zafran de-risks 90% of critical vulnerabilities overnight across your hybrid environment and utilizes Agentic Capabilities and your existing security tools to rapidly mitigate and remediate the 10% most likely to be exploited.\nWho’s behind us: Zafran is backed by Menlo Ventures, Sequoia Capital, Cyberstarts, and a deep belief that cybersecurity should move as fast as attackers do. We’re one of the fastest-growing companies in the industry, scaling to meet demand from the world’s most advanced, security-obsessed organizations.\nWe’re serious about our mission- so expect work that matters, teammates who challenge and inspire you, and plenty of fun along the way!\nWhat you’ll do\nCreate, build and lead Zafran’s Data Infra team from the ground up.\n\nOwn the infrastructure of Zafran’s investigation data layer for the Platform.\n\nTurn Zafran’s investigation infrastructure into a dedicated, well-defined platform capability.\n\nDesign and evolve the data models, schemas, indexing strategies, and query patterns that power Zafran’s investigation databases.\n\nLead the architecture, operation, and scaling of the databases and search infrastructure that power investigation, analytics, and query use cases across the platform.\n\nPartner closely with Product, Backend, DevOps, Security Research, and customer-facing engineering teams to define clear boundaries, contracts, and data-layer APIs.\n\nMake the data layer reliable, observable, cost-efficient, and performant across many tenants and large volumes of security data.\n\nSet engineering standards for schema design, data modeling, query optimization, migrations, backfills, and data-quality monitoring.\n\nMentor engineers, review technical designs, and raise the bar for how Zafran builds and operates data infrastructure.\n\nStay hands-on: this is a leadership role for someone who can still go deep into architecture, production issues, performance bottlenecks, and complex queries.\n\nWhat you bring\n4+ years of experience as a Team Lead or Engineering Manager of a data infrastructure, platform, backend infrastructure, or database-oriented team.\n\n4+ years of hands-on experience with large-scale analytical databases, data platforms, or search infrastructure.\n\nDeep understanding of data modeling, query optimization, indexing, partitioning, storage layouts, and performance tradeoffs.\n\nProduction experience with ClickHouse, Elasticsearch, or similar systems (BigQuery, Snowflake, Redshift, OpenSearch).\n\nStrong backend fundamentals and the ability to design reliable, scalable, observable, and maintainable systems.\n\nExperience running data systems in production: monitoring, incident response, capacity planning, cost management, migrations, and backfills.\n\nAbility to define clean interfaces between platform teams and product teams.\n\nA leadership style that combines technical depth, ownership, mentorship, and cross-team collaboration.\n\nComfort in a fast-moving startup where the team is still being shaped.\n\nNice to have\nHands-on ClickHouse experience in production.\n\nHands-on ElasticSearch experience in production.\n\nExperience with multi-tenant SaaS data architectures.\n\nExperience with streaming or event-driven ingestion pipelines, including Kafka or similar technologies.\n\nBackground in cybersecurity, vulnerability management, exposure management, CTEM, SIEM, EDR, CNAPP, CSPM, or related security-data domains.\n\nExperience building a new team, owning a platform capability, or extracting infrastructure ownership from a product team.\n\nExperience supporting analytical or investigation-heavy product use cases.\n\nWhy this role matters\nZafran’s product depends on making complex security data usable, searchable, explainable, and actionable. The Data Infra team will own the technical layer that makes this possible.\nThis is a chance to define how Zafran models and queries investigation data, how our product teams consume it, and how our platform scales as customer data grows. You’ll be joining at the moment where the data layer becomes a dedicated platform discipline - and you’ll have the opportunity to shape both the architecture and the team behind it.","description_format":"text","description_chars":5347,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security"],"lifecycle":[{"event":"open","at":"2026-09-06T11:22:24Z"}],"visa":[],"liveness":{"score":48,"band":"ok","label":"Likely open","p_open":1,"p_active":0.792,"p_room":0.6,"age_days":60,"expected_fill_days":74,"reasons":["conf:2","win:late","crowd:"],"computed_at":"2026-10-23T05:54:15Z"},"pay":null,"html_url":"https://alion.io/job/zafran-security-query-infra-team-lead","json_url":"https://alion.io/job/zafran-security-query-infra-team-lead.json","meta":{"generated_at":"2026-10-23T06:09:16Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":10026,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-24T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":177893},"rest":"https://alion.io/mcp/rest/get_company?id=177893"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fzafran-security-query-infra-team-lead"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fzafran-security-query-infra-team-lead"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fzafran-security-query-infra-team-lead"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/zafran-security-query-infra-team-lead\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fzafran-security-query-infra-team-lead"}]}