VP Incident Response

Profero is an incident response company. Subscription customers get a qualified responder triaging within 20 minutes of declaring an incident, and about 70% of the work is cloud, 30% on-premises.

Profero seeks a VP Incident Response to own all of it: the service, the people, the quality bar, and the next stage of growth. This is executive leadership in a small company. You work with the founders directly, and your decisions take effect the same week.

Agentic IR is how we run incidents. AI agents with read-only access do the collection and correlation; a named responder owns every conclusion. Agents investigate, responders decide. You decide how far that model goes, where it stops, and how we explain it to customers, insurers, and counsel.

Core Responsibilities

• Ownership: every engagement, from the first call to the final report, with response times, quality, customer outcomes, and capacity measured and reported to the leadership team
• Own the team: a two-year hiring plan, a leadership layer under you, and career paths that keep senior responders here (we hire mid-level and senior only)
• Own the method: how we investigate, what a finding needs before it is reported, and how our agents and responders split the work
• Lead the biggest incidents as the executive in the room when a customer’s board, CEO, breach counsel, insurer, or regulator needs answers
• Build the relationships that bring incidents in: insurers, brokers, and law firms, alongside sales on the largest subscription deals
• Set the direction for research, talks, and media; our cases become public research when customers agree to it
• Work with product on Rapid-IR, so the friction responders hit in a live case becomes a fix

Required Qualifications

• 12+ years in incident response, DFIR, or security operations
• 5+ years leading an IR practice or team, including managers who report to you
• Responsibility for an IR or consulting service as a business: utilization, margins, capacity planning, or a P&L
• Executive-level crisis response on major incidents, with boards, counsel, and regulators
• Technical credibility: senior responders follow you because you have done the work and can still read their analysis
• Working relationships with cyber insurers, insurer panels, or breach counsel
• Clear written and spoken English, and comfort presenting to executives and to a conference room
• Availability at the top of the escalation path; incidents don’t keep office hours
• Comfort with fully remote work

Preferred Qualifications

• Built a service around automation or AI, and dealt with where it went wrong
• Grew an IR practice into a new country or market
• A public profile: research, talks, advisories, media

Benefits

• Fully remote work, based in Israel
• Flexible vacation plan
• Home office allowance
• Paid time for research, writing, and community work

Contact

To apply, send your resume to careers@profero.io. Include links to anything that shows your work: talks, research, reports you can share, LinkedIn. Tell us why remote work suits you.