Incident Responder

Job not on LinkedIn

🔥 1 hour ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

LastPass

WebsiteLinkedInAll Job Openings

501 - 1000 employees

Founded 2008

🔒 Cybersecurity

☁️ SaaS

🤝 B2B

Cybersecurity • SaaS • B2B

LastPass is a leading password management and cybersecurity company that offers solutions for both individuals and businesses. With a strong focus on security and privacy, LastPass provides a secure vault for storing and managing passwords, ensuring that sensitive information remains protected. It offers multi-device access and a variety of features such as password sharing, dark web monitoring, and multifactor authentication to enhance user security. LastPass serves various user groups with its Personal, Families, Teams, and Business plans, catering to both personal and enterprise-level security needs. Additionally, its zero-knowledge encryption model ensures that only users have access to their password details. LastPass's commitment to providing a safe and user-friendly password management experience makes it a preferred choice for millions worldwide.

📋 Description

• Own security incidents end-to-end — receive and validate MSSP escalations, lead investigations, coordinate response, and drive containment, eradication, and recovery. • Conduct proactive threat hunts across cloud and endpoint telemetry, turning findings into durable detections that improve coverage and fidelity. • Build and tune detection content in Microsoft Sentinel and across the cloud security stack in close partnership with the Detection Engineering team • Develop and improve enrichment and response workflows to reduce manual effort, accelerate response times, and scale the team's impact • Apply AI-assisted approaches to triage, investigation, detection authoring, and automation — helping the team adopt these capabilities responsibly and effectively • Analyze logs and telemetry from cloud platforms, identity systems, endpoints, and network sources to detect and reconstruct attacker activity • Document investigations thoroughly — capturing actions, evidence, timelines, and conclusions — to a standard that supports both technical follow-up and stakeholder communication • Manage and strengthen the MSSP relationship by providing feedback on escalation quality, tuning alerting thresholds, and contributing to lessons-learned reviews

🎯 Requirements

• Proven experience in incident response and security operations in cloud-native environments, with hands-on depth in Azure and AWS • Proven experience with Microsoft Sentinel or a comparable SIEM for investigation and detection engineering, including authoring and tuning detection content • Proven experience working with an MSSP — managing escalations, providing quality feedback, and closing gaps in coverage — whether as client or vendor • Proven experience conducting threat hunts and building automation in support of security operations, including SOAR playbooks, scripting, and enrichment workflows • Strong command of attacker tactics, techniques, and procedures, the cyber kill chain, and MITRE ATT&CK, with solid grounding in networking fundamentals, cloud security domains, and identity systems including Active Directory and Entra ID • Communicates clearly with both technical and non-technical stakeholders, exercises sound judgment under pressure, and operates effectively both independently and as part of a collaborative team • Commitment to continuous improvement — proactively contributing to detections, runbooks, tooling, and operational processes that raise the bar for the team

🏖️ Benefits

• Competitive compensation • Flexible Paid Time Off policies, including but not limited to: Quarterly Self-Care Days (4 extra paid days off annually) and Volunteer Days • Parental leave • Comprehensive health coverage, including dependents • Home office setup support • LastPass Families free account for up to 5 members • Continuous learning and development opportunities, including an annual learning stipend to invest in your growth • Peer-to-peer recognition through Motivosity • Employee Assistance Program for well-being support • Remote work stipend to support your home office needs • Short-Term or Remote-Centric Work Arrangements for added flexibility