LastPass is looking for a Security Operations Manager:
As a Security Operations Manager within the Detection, Automation, Engineering & Response Team (DA3RT), you will lead the EU team in security investigations and drive high-profile security cases to resolution. You will serve as a coach, mentor, and teammate to a group of experienced operators and are expected to be proficient in all technical domains.
If you are passionate about complex problem solving and motivated by scale, then this is the role for you!
Who will you work with?
Security Operations Managers commonly interact with all areas of the business, including Platform and Software Engineering teams, Security Engineers, and Detection Engineers.
What are some of the exciting challenges you will be working on?
- Responsible for overseeing all SecOps investigations in the EU time zone.
- Collaborate with Detection Engineering, Threat Research, and US SecOps leadership to ensure alignment and standardization across all detection and response capabilities.
- Monitor and report on the program maturity of the EU SecOps team, including but not limited to MTTD, MTTR, MTTI, and balance checks across all team members.
- Provide vision and strategy, setting clear and challenging performance goals for the team and individual members.
- Possess in-depth knowledge of the technologies used, product domain, and operational practices.
- Have the authority to challenge, accept, or reject implementation plans and work completed.
- Evaluate the team and team members regularly, providing quality feedback and coaching.
- Drive internal and external communication to improve transparency.
What does it take to work at LastPass?
- Proven experience in a lead capacity within Security Operations is required.
- People management experience to ensure transparency, communication, and clear direction aligned with departmental and business objectives.
- Relevant experience in Security Operations as a technical operator.
- Intermediate knowledge of security-related technologies, including but not limited to the AWS Security Stack, EDR solutions, SASE providers, and Identity Protection controls.
- Intermediate knowledge of security frameworks, such as MITRE ATT&CK, OWASP, and NIST CSF.
- Intermediate knowledge of Detection-as-Code methodologies and the rationale behind their adoption.
It's great, but not required
- Proficiency in Python and PowerShell.
- A background in penetration testing, red teaming, or threat hunting.
