RemoteLeaf Logo
Log in Sign up

Incident Responder

1 month ago
United States
Full-time
Senior
Security Analyst
Cybersecurity
Active Directory AWS Azure SIEM Wireshark
Apply Now
LastPass

LastPass

LastPass, a product of LogMeIn, Inc., is a leading password and identity management solution provider with over 33 million users worldwide. From personal password management to enterprise solutions, LastPass offers convenient and secure ways to organiz...

IT Services
251-1K
Founded 2008
$30M raised
View All Jobs 5

Description

  • Own security incidents end to end, from validating MSSP escalations through containment, eradication, and recovery.
  • Conduct proactive threat hunts across cloud and endpoint telemetry and convert findings into durable detections.
  • Build and tune detection content in Microsoft Sentinel and the broader cloud security stack.
  • Develop enrichment and response workflows that reduce manual effort and improve response speed.
  • Apply AI-assisted approaches to triage, investigation, detection authoring, and automation.
  • Analyze logs and telemetry from cloud, identity, endpoint, and network sources to reconstruct attacker activity.
  • Document investigations thoroughly with actions, evidence, timelines, and conclusions.
  • Manage the MSSP relationship by providing feedback, tuning alert thresholds, and supporting lessons-learned reviews.
  • Partner with Detection Engineering and the broader Security Intelligence & Response team on investigations and detections.

Requirements

  • Proven experience in incident response and security operations in cloud-native environments, with hands-on depth in Azure and AWS.
  • Proven experience with Microsoft Sentinel or a comparable SIEM for investigation and detection engineering.
  • Proven experience working with an MSSP, including managing escalations and providing quality feedback.
  • Proven experience conducting threat hunts and building automation for security operations, including SOAR playbooks, scripting, and enrichment workflows.
  • Strong command of attacker tactics, techniques, and procedures, the cyber kill chain, and MITRE ATT&CK.
  • Solid grounding in networking fundamentals, cloud security domains, and identity systems including Active Directory and Entra ID.
  • Strong communication skills with both technical and non-technical stakeholders and sound judgment under pressure.
  • Ability to operate effectively both independently and as part of a collaborative team.
  • Familiarity with the Intelligence-Driven Incident Response approach is preferred.
  • Experience interpreting network traffic and performing packet captures using tcpdump or Wireshark is preferred.
  • Relevant certifications such as GCIH, GCIA, GCFA, AZ-500, or AWS Security Specialty are preferred.

Benefits

  • US pay range of $108,400 to $122,000 USD.
  • Remote-first culture with short-term or remote-centric work arrangements.
  • Competitive compensation.
  • Flexible Paid Time Off, including Quarterly Self-Care Days and Volunteer Days.
  • Parental leave.
  • Comprehensive health coverage, including dependents.
  • Home office setup support and a remote work stipend.
  • Continuous learning and development opportunities, including an annual learning stipend.
  • Employee Assistance Program and peer-to-peer recognition through Motivosity.
  • LastPass Families free account for up to 5 members.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

GuidePoint Security

Data Governance Analyst

GuidePoint Security 251-1K Internet Software & Services

GuidePoint Security is seeking a Data Governance Analyst to support client engagements involving data security, privacy, regulatory compliance, and responsible AI governance.

United States Full-time Junior Security Analyst
Python
17 hours, 27 minutes ago
L

SOC L1 Analyst

Lion Hires Recruitment / staffing / talent acquisition

The client is seeking a SOC Analyst to monitor fintech infrastructure, detect and respond to threats, and strengthen security operations protecting sensitive financial data.

Anywhere Full-time Mid Level Security Analyst
AWS Azure Cybersecurity ELK Stack SIEM Splunk
17 hours, 57 minutes ago
L

SOC L2 Analyst

Lion Hires Recruitment / staffing / talent acquisition

Join the client’s Information Security team as a SOC L2 Analyst, investigating and resolving advanced threats while strengthening security operations across its fintech ecosystem.

Anywhere Full-time Senior Security Analyst
AWS Azure Cybersecurity ELK Stack Splunk
17 hours, 57 minutes ago
Coretelligent

GRC Analyst

Coretelligent 251-1K Internet Software & Services

Coretelligent is seeking a GRC Analyst to support client governance, risk, and compliance programs through security awareness management, vendor risk assessments, controls maintenance, and security posture documentation.

United States Full-time Mid Level Security Analyst
$70k-$88k
Cybersecurity HIPAA
18 hours, 12 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers