[Hiring] Director, Security Operations @LastPass

Role Description

LastPass is looking for a Director, Security Operations. In this role, you will own the strategy, operations, and continuous evolution of LastPass's Security Operations. You will set the direction for how LastPass detects, responds to, and recovers from security incidents - translating threat intelligence into a mature, high-performing program that shapes the company's security posture and protects customer trust.

About the team:

• The Security Operations team is the frontline of LastPass's security.
• Responsible for detecting threats, leading investigations, and driving incident response across the full technology estate.
• A globally distributed team combining deep technical expertise with a strong culture of collaboration, continuous improvement, and AI-assisted tooling to operate at speed and scale.

If you are passionate about complex problem solving and motivated by scale, then this is the role for you!

Who will you work with?

• Partner closely with the CISO, Platform and Software Engineering, Cloud Security, Cyber Defence team, GRC, Legal, and Communications teams.
• Engage with vendors, threat intelligence partners, industry CERTs, and law enforcement as needed.
• Manage and develop a team of experienced Response Analysts.

What are some of the exciting challenges you will be working on?

• Own and drive the strategy, roadmap, and maturation of LastPass's Security Operations function.
• Lead all response operations across the full incident lifecycle, from detection and triage through containment, eradication, recovery, and post-incident review.
• Build, develop, and retain a high-performing team of analysts and engineers.
• Partner with the CISO, Legal, and Communications to manage high-severity incidents.
• Define and own detection and response program metrics, SLAs, and reporting frameworks.
• Champion the integration of AI-assisted triage, automation pipelines, and Detection-as-Code methodologies.
• Establish and maintain strategic relationships with external partners.
• Collaborate across Business Technology, Cloud Security, and Platform Engineering.

Qualifications

• Proven experience in security operations, including senior leadership ownership of an incident response or cyber defense function at scale.
• Proven ability to build, lead, and develop high-performing security teams.
• Advanced, hands-on knowledge of the CSIRT/SOC discipline.
• Expert-level command of security frameworks including MITRE ATT&CK, NIST CSF, and the SANS incident response lifecycle.
• Proven track record of engaging executive leadership, legal counsel, and external stakeholders during major security incidents.
• Strategic thinker who can translate complex threat landscapes into clear program priorities.
• Operates with calm authority under pressure.
• Builds influence across organizational boundaries.

Requirements

• Experience in the password management, identity security, or SaaS security product domain (not required).
• Background in red team operations, adversary simulation, or threat hunting (not required).
• Proficiency in Python or PowerShell to drive automation (not required).

Benefits

• Market-leading password manager.
• High-growth, collaborative environment with inclusive teams.
• Remote-first culture.
• Competitive compensation.
• Flexible Paid Time Off policies, including Quarterly Self-Care Days and Volunteer Days.
• Parental leave.
• Comprehensive health coverage, including dependents.
• Home office setup support.
• LastPass Families free account for up to 5 members.
• Continuous learning and development opportunities.
• Peer-to-peer recognition through Motivosity.
• Employee Assistance Program for well-being support.
• Remote work stipend to support your home office needs.
• Short-Term or Remote-Centric Work Arrangements for added flexibility.