LastPass - Principal Cloud Security Engineer
Summary
Principal-level cloud security engineer at LastPass who defines cloud security standards and partners with DevOps and CI/CD teams to embed shift-left security across cloud infrastructure. Core stack: AWS security services (IAM, KMS, GuardDuty), Kubernetes/EKS, Docker, and IaC with Terraform/CDK and GitLab CI.
Challenges:
- Act as a strategic security leader by defining and driving cloud security principles, standards, and reference architectures across the organization.
- Use your knowledge of security architecture to help engineers build and securely operate products and services from the ground up
- Assess, design, and implement security processes and controls to meet security, compliance, and audit requirements
- Perform proactive research to identify new threats and attack vectors
- Partner with engineering teams to embed shift-left security practices throughout the software development lifecycle
- Implement and manage cloud and Kubernetes security posture management tooling to continuously monitor and reduce risk across containerized workloads
- Proven experience working with AWS and AWS security services in a secure production environment, including IAM, Config, KMS, Secrets Manager, CloudWatch, CloudTrail, and GuardDuty
- Proven experience working closely with engineering teams and supporting them on their path to shifting security left
- Background with infrastructure as code (AWS CDK, CloudFormation, or Terraform), version control and CI tools such as GitLab and GitLab CI
- Hands-on experience with Kubernetes (AWS EKS), containers (Docker, AWS ECS), K8s admission controllers and Supply Chain Security
- Solid understanding of internet and computer network protocols, including TCP/IP, TLS, and VPN
- Good written and verbal communication skills in English
- Collaborative team player with a hands-on, can-do approach to problem-solving
- AWS Certified Security – Specialty certification or similar.
- General familiarity with AI tools and large language models (e.g., Claude by Anthropic, AWS Bedrock)
- The leader in secure access
- High-growth, collaborative environment with inclusive teams
- Remote-first culture
- Competitive compensation
- Flexible Paid Time Off policies, including but not limited to: Quarterly Self-Care Days (4 extra paid days off annually) and Volunteer Days
- Parental leave
- Comprehensive health coverage, including dependents
- Home office setup support
- LastPass Families free account for up to 5 members
- Continuous learning and development opportunities, including an annual learning stipend to invest in your growth
- Peer-to-peer recognition through Motivosity
- Employee Assistance Program for well-being support
- Remote work stipend to support your home office needs
- Short-Term or Remote-Centric Work Arrangements for added flexibility