Listing Description

LastPass is looking for a Staff/Principal Cloud Security Engineer:

The LastPass Product Security team is looking for a Staff/Principal Cloud Security Engineer candidate to join our team and help us ensure the privacy and security of our company and user’s data. We are a team of talented application and cloud security engineers, who work in a direct partnership with our engineering and platform organizations. Your mission will be to support our engineering teams on their “shift security left” journey.

If you are passionate about complex problem solving and motivated by scale, then this is the role for you!

Who will you work with?

As a Staff/Principal Cloud Security Engineer in LastPass, you will partner with DevOps and CI/CD engineers and our architect team to ensure security best practices across our infrastructure.

What are some of the exciting challenges you will be working on?

• Use your knowledge of security architecture to help software engineers build and securely operate products and services from the ground up.


• Assess and implement security processes and controls to meet security, compliance and audit requirements.


• Perform proactive research to identify new threats and attack vectors.


• Work on a highly agile product security team, as well as with other cross-functional teams.

What does it take to work at LastPass?

• 5+ years of experience working with AWS


• Previous experience in working closely with engineering teams and supporting them on their path to “shifting security left”.


• Experience with infrastructure as code. (AWS CDK/Cloudformation or Terraform)


• Working knowledge of AWS security services and features of services to provide a secure production environment. (AWS IAM, Config, KMS, Secrets Manager, Cloudwatch, Cloudtrail, GuardDuty)


• Experience with version control, build, and bug tracking systems. (TeamCity, Jenkins, Gitlab and Jira)


• Good understanding of internet and computer networks (TCP/IP, TLS, VPN, etc).


• Hands-on experience with Kubernetes and securing Kubernetes workloads on AWS EKS


• Hands-on experience securing workloads running on containers (Docker)


• Good written and verbal communication skills in English.


• Team-player, hands-on and can-do attitude.

It's great, but not required:

• AWS Certified Security – Specialty certification or similar.


• Experience with gitOps (Argo)