LastPass is looking for a Senior Application Security Engineer (PHP):

The LastPass Product Security team is seeking a Senior Application Security Engineer (PHP) to join our dynamic team and help us ensure the security of our applications. 

If you are passionate about complex problem solving and motivated by scale, then this is the role for you!

Who will you work with?

As a Senior Application Security Engineer (PHP) in LastPass, you will partner with software engineers, product owners and our architect team to ensure security best practices across our products.

What are some of the exciting challenges you will be working on?

• Join a passionate application security team committed to enhancing LastPass's product security.


• Apply your expertise in security architecture to assist software engineers in developing secure products and services from the ground up.


• Collaborate closely with engineering and platform teams to understand their application security requirements.


• Conduct application security design reviews, engage in threat modeling, and perform code reviews.


• Utilize your penetration testing skills to bolster the security of both internal and external applications and services.


• Address complex server-side application issues written in PHP through debugging and troubleshooting.


• Educate engineering teams and security champions in secure coding and development practices

What does it take to work at LastPass?

• Strong written and verbal communication skills in English


• Extensive technical expertise in web application security


• Experience in developing and/or securing web applications written in PHP


• Fundamental understanding of Docker and container security


• Prior experience with threat modeling, testing, and analyzing server-side applications


• Proficiency in identifying software flaws and effectively communicating solutions


• Previous collaboration with engineering teams and support throughout the SDLC (Software Development Life Cycle)


• Team-oriented, proactive, and adaptable attitude

It’s great, but not required:

• Experience with .NET


• Experience with TypeScript and React


• Experience with GitLab CI/CD


• Experience with AWS (Amazon Web Services)