Principal Cybersecurity Incident Commander

LastPass, the #1 password leader, provides password and identity management solutions that are convenient, easy to manage, and effortless to use, helping more than 32 million users and 100,000 businesses organize and protect their online lives. As a pioneer in cloud security technology, LastPass provides award-winning password and identity management solutions that are convenient, effortless, and easy to manage. LastPass values users’ privacy and security, so your sensitive information is always hidden – even from us.

We welcome new ideas, support your growth, and recognize your value, if this aligns with what you are looking for in your next career move, Join Us

LastPass is looking for a Principal Cybersecurity Incident Commander: 

The ideal candidate can manage complex cybersecurity investigations, think outside the box when new issues arise, and can multi-task by managing multiple work streams while compiling written communications and verbally engaging with stakeholders.  Our incident response team adheres to the NIST Cybersecurity Framework and as such, you will be expected to demonstrate their familiarity and experience with conducting thorough investigations from start to finish. 

If you are passionate about complex problem solving and motivated by scale, then this is the role for you!

Who will you work with?

You will work constructively with stakeholders beyond security teams, such as developers and engineers across the company located around the world. 

 What are some of the exciting challenges you will be working on?

• Participates in process improvement projects across security teams enhancing cross-team workflows to drive collaboration between multiple teams. 
• Perform incident response services including, but not limiting to, collection, documentation, and analysis of incident evidence. 
• Plans, participates, and oversees tabletop exercises and incident simulations to ensure operational readiness and the updates necessary to support coordinated response. 
• Continually improves cybersecurity response function through post incident reviews (PIR) and soliciting feedback from partners within the cybersecurity organization, as well as engineering and partner teams. 
• Support rotating pre-planned on call requirements that may result in off hours engagement in certain situations. 
• Continuously maintains and enhances incident response plans, relevant playbooks, runbooks, and knowledge base to increase efficiency and response consistencies. 

What does it take to work at LastPass?

• Strong understanding of the security threat landscape in a cloud environment, vulnerabilities, and incident response best practices. 
• Demonstrate strong communication and collaboration skills with cross-functional teams. 
• Strong understanding of the cyber kill chain and countermeasures applied to defend against cybersecurity attacks. 
• Ability to balance and manage multiple projects or response activities concurrently, while maintaining effective communication with stakeholders. 

It's great, but not required:

• Experience in cybersecurity related field (member of a Security Operations Center (SOC), Incident Manager/Commander/Responder, etc).  
• Cybersecurity certifications from accredited organizations (e.g. Sec+, GCIH, CISSP, CEH, etc) 

Why LastPass? 

• Market-leading password manager
• High-growth, collaborative environment with inclusive teams
• Remote first culture
• Competitive compensation 
• Flexible Paid time off policies including but not limited to: Monthly self-care days (12 extra paid days off annually), volunteering days
• Generous Parental leave
• Comprehensive health coverage, dependents included
• Home office setup support
• LastPass families free account up to 5 members
• Continuous learning and development opportunities

Unlock your potential with us - your skills, experience, and unique perspective matter more than just checking the boxes. Apply today, and let's build the future together!

We’re building an inclusive community that reflects the people of all races, genders, sexual orientations, national origins, backgrounds, and perspectives who share our world.

For all US based jobs please review our Applicant Privacy Notice

For all EU based jobs please review our Candidate Privacy Notice 

Please review our CCPA Notice