Director, Security Operations

This is a fully remote position, open to applicants in Ireland.

📋 Description

• Take ownership of and advance the strategy, roadmap, and development of LastPass's Security Operations function, translating the threat landscape into a multi-year program plan that aligns with business growth.

• Oversee all response operations throughout the entire incident lifecycle, from detection and triage to containment, eradication, recovery, and post-incident review.

• Build, nurture, and retain a high-performing team of analysts and engineers, establishing clear performance expectations, career development paths, and a culture focused on operational excellence.

• Collaborate with the CISO, Legal, and Communications to manage critical incidents, coordinating executive responses and meeting regulatory notification requirements.

• Define and manage metrics, SLAs, and reporting frameworks for detection and response programs, providing the CISO and board with transparent, evidence-based insights into program maturity and risk posture.

• Advocate for the integration of AI-assisted triage, automation pipelines, and Detection-as-Code methodologies to minimize analyst workload and reduce mean time to respond.

• Establish and sustain strategic partnerships with external entities, including threat intelligence vendors, law enforcement, and industry information-sharing groups, to enhance LastPass's situational awareness.

• Work collaboratively across Business Technology, Cloud Security, and Platform Engineering to ensure comprehensive detection coverage and coordinated response capabilities across the entire technology estate.

⛳️ Requirements

• Demonstrated experience in security operations, including senior leadership responsibility for an incident response or cyber defense function at scale.

• Proven capability to build, lead, and cultivate high-performing security teams, including managing through managers, in a fast-paced, high-stakes environment.

• Advanced, hands-on expertise in the CSIRT/SOC domain, encompassing digital forensics, threat intelligence, malware analysis, network analysis, or incident management across cloud-native and hybrid infrastructures.

• Expert-level understanding of security frameworks such as MITRE ATT&CK, NIST CSF, and the SANS incident response lifecycle, with proven application in real-world program development.

• Established history of engaging executive leadership, legal counsel, and external stakeholders during significant security incidents, including regulatory and board-level communication.

• Strategic thinker capable of transforming complex threat landscapes into clear program priorities and effectively communicating risk in business terms to non-technical audiences.

• Maintains composure and authority under pressure, able to drive decisive, coordinated actions during high-severity incidents while preserving team morale and stakeholder confidence.

• Influences across organizational boundaries, achieving security objectives through cross-functional collaboration without relying on positional authority.

🏝️ Benefits

• Market-leading password manager.

• High-growth, collaborative environment with inclusive teams.

• Remote-first culture.

• Competitive compensation.

• Flexible Paid Time Off policies, including but not limited to: Quarterly Self-Care Days (4 extra paid days off annually) and Volunteer Days.

• Parental leave.

• Comprehensive health coverage, including dependents.

• Home office setup support.

• LastPass Families free account for up to 5 members.

• Continuous learning and development opportunities, including an annual learning stipend to invest in your growth.

• Peer-to-peer recognition through Motivosity.

• Employee Assistance Program for well-being support.

• Remote work stipend to support your home office needs.

• Short-Term or Remote-Centric Work Arrangements for added flexibility.