.LastPass is looking for Vulnerability Assessment Analyst: The LastPass security team is seeking a Vulnerability Assessment Analyst to join our team and help us ensure the security of our company and user's data. As a member of the Trust & Security team, you will work closely with other security professionals, as well as engineering teams, to identify, verify, prioritize, and assist in the treatment of vulnerabilities, in a joint effort to improve the overall security posture and reduce the attack surface. In addition, you will aid in the creation of a robust and effective vulnerability management program, enabling the organization to maintain the highest levels of security and compliance. Your role will be critical in developing a security and resilience-focused culture, as the organization strives to provide the most secure and trustworthy services to customers. If you are passionate about complex problem solving and motivated by scale, then this is the role for you! Who will you work with? You will be part of our Security Posture and Attack Surface Engineering & Research (SPASER) team, collaborating closely with the wider Trust & Security teams. Your focus will be to contribute to the ongoing development and enhancement of a robust and effective vulnerability management program, while also ensuring the execution of daily vulnerability assessment activities. Additionally, you will provide support and actively collaborate with other critical security functions, such as threat intelligence, incident response, detection and response, and security engineering. You will also closely collaborate with various engineering teams across the organization as part of vulnerability management operations, promoting the treatment of vulnerabilities and suggesting improvements to our security posture. What are some of the exciting challenges you will be working on? Conducting regular vulnerability assessments of the organization's information systems, networks, and applications, including on-premise and cloud-based, using both automated scans and manual assessment methods. Analyzing and interpreting the results of vulnerability scans and assessments to identify potential risks, threats, and vulnerabilities that could impact the organization. Creating clear and concise reports and communicating findings to key stakeholders, including IT, Platform and Software Engineering teams. Working with the vulnerability treatment team and stakeholders to prioritize vulnerabilities based on the level of risk and the potential impact on the organization. Work closely with other security teams, including incident response and threat intelligence, to identify and mitigate security risks and vulnerabilities across the organization. Providing recommendations for strategies to mitigate and remediate identified vulnerabilities. Verifying and validating the findings of vulnerability assessments, including false positives and false negatives
