Profero is a world leader in incident response (IR) and the developer of the innovative “Rapid IR” platform. Profero is also pioneering a proactive Preemptive IR as a service, allowing for immediate response to cyber crises in the future. Profero was established by Guy Barnhart-Magen (CTO) and Omri Segev Moyal (CEO), two prominent leaders who aim to revolutionize how organizations handle readiness and response to breach incidents. Be a part of the future of cybersecurity by joining the talented team at Profero. We are a rapidly growing startup, and we are looking for highly motivated and results-driven people to join our team.

Remote position, Timezone from UTC-2 to UTC+2

The IR team at Profero comprises a group of bright and skilled professionals responsible for managing a diverse range of environments and tools. They provide crucial and consistent support to our customers daily, as well as during emergency situations. A significant part of the daily work involves completing assessments for our customers in writing and during live simulations. Other tasks require research, creativity, and profound knowledge. With operations running 24/7, the possibility of late-night incidents and weekend crises is inherent in the job. The nature of IR work is both varied and thrilling, consistently presenting new challenges and scenarios.

‍

About the Role

The Senior Incident Responder is a key role within Profero’s global Incident Response (IR) team.

The role focuses on leading complex cyber investigations, providing technical leadership during active incidents, working directly with customers, and mentoring other IR team members.

This position operates in a fast-paced, high-impact environment, handling large-scale cyber incidents and requiring availability outside standard working hours when needed.

Responsibilities

• Lead complex Incident Response investigations end-to-end

• ⁠Provide technical leadership and guidance to IR analysts during active incidents

• ⁠Make real-time technical and investigative decisions, including defining investigation paths

• ⁠Perform advanced forensic investigations across endpoints, networks, and cloud environments

• ⁠Conduct root cause analysis and define remediation and prevention recommendations

• ⁠Work directly with customers, including status updates, briefings, and presentation of findings

• ⁠Write, review, and approve Incident Response reports at both technical and executive levels

• ⁠Develop, improve, and implement IR processes, workflows, and investigation methodologies

• ⁠Mentor junior and mid-level IR team members

• ⁠Contribute to internal knowledge sharing and best practices

• ⁠Participate in on-call rotations, including non-standard working hours when required

Requirements

• 5+ years of experience in Incident Response / DFIR (military and/or civilian)

• ⁠Proven experience leading complex cyber investigations and making decisions under pressure

• ⁠Strong technical understanding of Windows, Linux/Unix, and macOS operating systems

• ⁠Deep knowledge of endpoint forensics  and OS artifacts

• ⁠Solid understanding of network architectures and common protocols

• ⁠Experience with cloud environments, servers, and web applications

• ⁠Knowledge of malware analysis and in-the-wild attack investigations

• ⁠Experience with large-scale data and log analysis

• ⁠Strong technical writing skills and experience presenting findings to customers

• ⁠Ability to manage multiple incidents and projects simultaneously

• ⁠Excellent written and verbal English communication skills

• ⁠Ability to work independently and as part of a distributed global team

Nice to Have

• Experience mentoring or leading other analysts

• ⁠Familiarity with application security and web security

• ⁠Experience conducting Incident Response simulations or tabletop exercises

• ⁠Contributions to methodology development, tooling, or automation

What We Offer

• Fully remote position within a global Incident Response team

• ⁠Exposure to high-impact, real-world cyber incidents

• ⁠Professional, collaborative, and growth-oriented work environment

• ⁠Opportunities for professional growth and technical leadership

• ⁠Flexible time off and working hours aligned with the nature of IR work

‍