Senior Security Engineer at Silverfort

Tel Aviv, Tel-Aviv District, Israel -

Full Time

Start Date

Immediate

Expiry Date

10 Oct, 26

Salary

0.0

Posted On

12 Jul, 26

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Security Engineering, Identity & Access Management, Zero Trust, Network Security, Cloud Security, Python, Bash, Threat Modeling, ZTNA, RBAC, Conditional Access, Secure Design Review, Automation, Infrastructure as Code, AI Security, DNS

Industry

Computer and Network Security

Description

Silverfort is on a mission to bring identity security everywhere – to every human, machine, and AI agent, both on-prem and in the cloud. Our unique technology secures identities & access at runtime, in ways that weren’t possible before. With the broadest identity security platform in the market, trusted by more than 1,000 customers, including many Fortune 100 companies, Silverfort is uniquely positioned to lead the fast-growing identity security category. Joining Silverfort means becoming part of a fast-moving team with a culture of innovation and collaboration, that goes above and beyond to help our customers and each other, on a journey to reshape the future of identity security. We are looking for a Senior Security Engineer to join us. In this role, you will own, operate, and evolve our security engineering stack across email, network, identity, and emerging domains. You will be the day-to-day owner and administrator of our security tools - running, tuning, and hardening the controls already in place, leading new initiatives across ZTNA, secure browsing, and AI security, and partnering closely with IT, DevOps, and R&D to embed security into every layer of how Silverfort operates. Responsibilities Own, administer, and operate the security controls and platforms across email security, network security, ZTNA, secure browsing, and emerging domains such as AI security Run the day-to-day administration of the security toolset: deployment, configuration, and policy management, upgrades and patching, health and availability monitoring, licensing, and integrations Drive identity & access security initiatives end-to-end: Zero Trust posture, Conditional Access, RBAC, identity lifecycle, access reviews, and governance Lead refinement and improvement of existing stack components, from configuration tuning and policy hardening to architecture-level changes Design and roll out new security initiatives end-to-end Build automation across the security stack: integrations, enrichment, response actions, etc. Partner with R&D and DevOps to embed security into design, deployment pipelines, and infrastructure as code Conduct threat modeling, secure design reviews, and risk assessments for new and changing systems Maintain clear operational documentation, runbooks, and architecture decisions to make your work repeatable and reviewable Requirements 5+ years of experience in security engineering or equivalent hands-on security roles Strong hands-on experience across multiple security domains, with end-to-end ownership of at least one (e.g., identity & access, network, email, web, or endpoint security) Solid understanding of identity & access management: Zero Trust principles, Conditional Access, SSO, MFA, RBAC, identity lifecycle, and access governance Strong networking fundamentals: TCP/IP, DNS, segmentation, ZTNA, and modern remote access architectures Experience designing, deploying, administering, and operating security tools end-to-end Hands-on cloud security experience with at least one major provider (AWS or Azure), including IAM, network controls, and secure architecture patterns Programming and scripting skills (Python, Bash, or similar) Self-motivated and autodidactic, with a "do it yourself" mindset and the ability to deliver solutions end-to-end Strong collaboration and communication skills Background in AI security, LLM security, or securing AI-powered systems and workflows - an advantage

Responsibilities

The role involves owning and operating the security engineering stack across email, network, identity, and AI domains. Responsibilities include administering security tools, driving Zero Trust initiatives, and partnering with DevOps and R&D to embed security into infrastructure.