LastPass is looking for a Principal Cybersecurity Incident Commander:
The ideal candidate can manage complex cybersecurity investigations, think outside the box when new issues arise, and can multi-task by managing multiple work streams while compiling written communications and verbally engaging with stakeholders. Our incident response team adheres to the NIST Cybersecurity Framework and as such, you will be expected to demonstrate their familiarity and experience with conducting thorough investigations from start to finish.
If you are passionate about complex problem solving and motivated by scale, then this is the role for you!
Who will you work with?
You will work constructively with stakeholders beyond security teams, such as developers and engineers across the company located around the world.
What are some of the exciting challenges you will be working on?
- Participates in process improvement projects across security teams enhancing cross-team workflows to drive collaboration between multiple teams.
- Perform incident response services including, but not limiting to, collection, documentation, and analysis of incident evidence.
- Plans, participates, and oversees tabletop exercises and incident simulations to ensure operational readiness and the updates necessary to support coordinated response.
- Continually improves cybersecurity response function through post incident reviews (PIR) and soliciting feedback from partners within the cybersecurity organization, as well as engineering and partner teams.
- Support rotating pre-planned on call requirements that may result in off hours engagement in certain situations.
- Continuously maintains and enhances incident response plans, relevant playbooks, runbooks, and knowledge base to increase efficiency and response consistencies.
What does it take to work at LastPass?
- Strong understanding of the security threat landscape in a cloud environment, vulnerabilities, and incident response best practices.
- Demonstrate strong communication and collaboration skills with cross-functional teams.
- Strong understanding of the cyber kill chain and countermeasures applied to defend against cybersecurity attacks.
- Ability to balance and manage multiple projects or response activities concurrently, while maintaining effective communication with stakeholders.
It's great, but not required:
- Experience in cybersecurity related field (member of a Security Operations Center (SOC), Incident Manager/Commander/Responder, etc).
- Cybersecurity certifications from accredited organizations (e.g. Sec+, GCIH, CISSP, CEH, etc)
