Senior Threat Hunting & Incident Response - EMEA

Silverfort is on a mission to bring identity security everywhere – to every human, machine, and AI agent, both on-prem and in the cloud. Our unique technology secures identities & access at runtime, in ways that weren’t possible before. With the broadest identity security platform in the market, trusted by more than 1,000 customers including many Fortune 100 companies, Silverfort is uniquely positioned to lead the fast-growing identity security category.

Joining Silverfort means becoming part of a fast-moving team with a culture of innovation and collaboration that goes above and beyond to help our customers and each other, on a journey to reshape the future of identity security.

We׳re looking for a senior identity security practitioner to anchor its IRIS (Identity Response & Identity Security) function across EMEA. This is a player-coach role: you lead engagements hands-on, build out regional methodology and tooling, and eventually grow the team around you. If you want to own a function, not inherit one, this is the role.

• Lead identity-centric IR and threat hunting engagements across EMEA — from triage and scoping through investigation, containment and executive readout
• Build and maintain playbooks, tooling, and reporting standards that translate findings into hardening actions and lasting posture improvements
• Own customer outcomes end-to-end — engagements close with concrete risk reduction, not just a report
• Enable and support IR partners across the region — provide QA, enablement, and escalation support when it counts
• Represent Silverfort externally at conferences, roundtables, webinars, and customer events
• Shape the evolution of identity threat hunting as the attack surface expands into automation and agentic environments
• Influence product direction as the SecOps and IR practitioner voice — keeping the platform grounded in operational reality

• 8+ years of hands-on experience in incident response, breach response, threat hunting, or detection engineering
• Deep expertise in identity security — Active Directory, Entra ID, service accounts, non-human identities, authentication protocols
• Proven ability to operate at both technical depth and executive altitude — credible in the war room and the boardroom
• Track record of translating IR findings into actionable remediation and long-term posture improvements
• Experience enabling and working alongside IR partner firms in a senior capacity
• Strong communication skills — able to produce clear executive readouts, present at industry events, and build trust quickly with both