LastPass is looking for a Senior Information Security Engineer:
You will play a key part in enhancing our Edge Security posture, focusing on security services such as Web Application Firewall, Edge DNS and Bot Management. The ideal candidate should have a strong background in information security, a deep understanding of Edge technologies, and a passion for creating a secure and trustworthy digital environment.
If you are passionate about user safety, have a keen eye for security and a strong technical background, and you thrive in a collaborative and innovative environment, then this is the role for you.
Who will you work with?
Your interactions will span across various departments, fostering a collaborative and innovative work environment, including Engineering, Safety & Trust, Data Science, Security and Compliance, Product & UX teams in Hungary, Portugal, and the United States of America.
What are some of the exciting challenges you will be working on?
Security and Trust-Centric Development
- Research, identify, and implement measures that address trust and safety concerns of new and existing LastPass products and services.
- Akamai Security Administration: Configure and maintain Akamai security services such as WAF, Kona Site Defender, Edge DNS, and Bot Manager to protect web applications and APIs.
- Security Configuration & Tuning: Proactively analyze, configure, and fine-tune security rules, custom rulesets, and access controls within Akamai products based on evolving security requirements.
- Performance Optimization: Collaborate with development and network teams to optimize security configurations without compromising performance or user experience.
- Policy Review & Compliance: Regularly audit and review Akamai security configurations to ensure alignment with internal security policies, industry best practices, and compliance requirements.
- Collaboration & Training: Work closely with cross-functional teams to share security best practices, provide technical guidance, and support DevSecOps initiatives.
- Threat Detection & Mitigation: Implement strategies for proactive threat detection using Akamai tools, log monitoring, and anomaly detection to stay ahead of emerging threats.
Incident Management
- Lead the response to incidents, including mitigating attacks through Akamai configurations, monitoring traffic patterns, and collaborating with the incident response team.
- Collaborate with incident response teams to analyze and respond to security incidents promptly.
- Implement proactive measures to prevent future incidents and enhance the resilience of our systems.
Collaboration and Communication
- Communicate effectively with stakeholders to convey complex security concepts and requirements.
What does it take to work at LastPass?
- Background in Computer Science, Information Security, or a related field is preferred.
- Strong experience in information security engineering, with focus on Edge security solutions (Akamai or Cloudflare or Fastly).
- Expert-level knowledge of Akamai products, including Kona Site Defender, Web Application Firewall, Bot Manager, and Edge DNS.
- Proven experience in implementing and managing Akamai’s advanced security configurations, such as rate limiting, anti-bot measures, and DDoS protections.
- Hands-on experience in optimizing Akamai configurations to balance security, performance, and end-user experience.
- Knowledge of industry-standard security frameworks and best practices.
- Proficiency in programming languages such as Python, PHP, or C# is desirable.
- Strong problem-solving abilities, collaborative mindset, and proactive approach.
- Effective communication skills across diverse stakeholder groups with varying backgrounds and technical expertise within LastPass.
- Excellent written and verbal communication skills in English.
It's great, but not required:
- Certifications such as CISSP, CISM, or related certifications in information security.
- Akamai Certifications
- Experience with machine learning frameworks and tools for building anomaly detection models.
- Knowledge of regulatory requirements and standards related to information security.
- Experience with penetration testing and ethical hacking.
- Experience working with global teams.
