Principal Cloud Security Engineer

LastPass, Inc.; Canada; Remote; CAD 140,000 - 190,000; Full time

Benefits offered by this job

Remote-first culture

Competitive compensation

Flexible Paid Time Off

Parental leave

Home office setup

Learning stipend

Peer-to-peer recognition

Employee Assistance Program

Remote work stipend

Job summary

LastPass, Inc. is seeking a Principal Cloud Security Engineer to partner with DevOps and CI/CD engineers and architect teams to embed security across our cloud infrastructure. You will scale security decisions and enable secure, innovative solutions for customers.

You will collaborate with Cloud Security, Platform, and Trust & Security teams to drive secure-by-design outcomes throughout product and infrastructure development.

Qualifications

• Proven experience with AWS security services in production.
• Experience partnering with engineering teams to shift security left.
• Background in IaC and CI tools (CDK, CloudFormation, Terraform, GitLab CI).

Responsibilities

• Define and drive cloud security principles, standards, and reference architectures across the organization.
• Help engineers build and securely operate products and services from the ground up.
• Assess, design, and implement security processes and controls to meet security, compliance, and audit requirements.
• Perform proactive research to identify new threats and attack vectors.
• Partner with engineering teams to embed shift-left security practices throughout the software development lifecycle.
• Implement and manage cloud and Kubernetes security posture management tooling to continuously monitor and reduce risk across containerized workloads.

Skills

Cloud security

Security architecture

Threat research

Shift-left security

Team collaboration

English communication

Tools

AWS

Kubernetes

Docker

Terraform

GitLab CI

CloudFormation

CDK

Job description

Curious about our products? Visit our websiteand try it free!

We welcome new ideas, support your growth, and recognize your value, if this aligns with what you are looking for in your next career move, Join Us!

LastPass is looking for a Principal Cloud Security Engineer:

As a Principal Cloud Security Engineer at LastPass, you will partner with DevOps and CI/CD engineers and our Architects team to ensure security best practices are embedded across our cloud infrastructure. We are looking for an experienced security engineering leader with an ability to scale security and make the right trade-off decisions that enable us to offer secure, innovative solutions to customers.

About the team:

The Cloud Security team at LastPass is a collaborative group of talented cloud security engineers working in close partnership with our engineering, platform, and trust & security teams. We are on a mission to safeguard the privacy and security of our company and users' data, embedded directly in the heart of our product development.

If you are passionate about complex problem solving and motivated by scale, then this is the role for you!

Who will you work with?

You will work closely with DevOps and CI/CD engineers, Cloud Architects, and cross-functional engineering teams across LastPass. You will also collaborate with our Trust & Security and Platform teams, acting as a key embedded security partner throughout the product and infrastructure development process to drive secure-by-design outcomes at every stage.

What are some of the exciting challenges you will be working on?

• Act as a strategic security leader by defining and driving cloud security principles, standards, and reference architectures across the organization
• Use your knowledge of security architecture to help engineers build and securely operate products and services from the ground up
• Assess, design, and implement security processes and controls to meet security, compliance, and audit requirements
• Perform proactive research to identify new threats and attack vectors
• Partner with engineering teams to embed shift-left security practices throughout the software development lifecycle
• Implement and manage cloud and Kubernetes security posture management tooling to continuously monitor and reduce risk across containerized workloads

What does it take to work at LastPass?

• Proven experience working with AWS and AWS security services in a secure production environment, including IAM, Config, KMS, Secrets Manager, CloudWatch, CloudTrail, and GuardDuty
• Proven experience working closely with engineering teams and supporting them on their path to shifting security left
• Background with infrastructure as code (AWS CDK, CloudFormation, or Terraform), version control and CI tools such as GitLab and GitLab CI
• Hands-on experience with Kubernetes (AWS EKS), containers (Docker, AWS ECS), K8s admission controllers and Supply Chain Security
• Solid understanding of internet and computer network protocols, including TCP/IP, TLS, and VPN
• Good written and verbal communication skills in English
• Collaborative team player with a hands-on, can-do approach to problem solving

It's great, but not required

• AWS Certified Security – Specialty certification or similar.
• General familiarity with AI tools and large language models (e.g., Claude by Anthropic, AWS Bedrock)

Why LastPass?

• The leader in secure access
• High-growth, collaborative environment with inclusive teams
• Remote-first culture
• Competitive compensation
• Flexible Paid Time Off policies, including but not limited to: Quarterly Self-Care Days (4 extra paid days off annually) and Volunteer Days
• Parental leave
• Home office setup support
• LastPass Families free account for up to 5 members
• Continuous learning and development opportunities, including an annual learning stipend to invest in your growth
• Peer-to-peer recognition through Motivosity
• Employee Assistance Program for well-being support
• Remote work stipend to support your home office needs
• Short-Term or Remote-Centric Work Arrangements for added flexibility

We’re building an inclusive community that reflects the people of all races, genders, sexual orientations, national origins, backgrounds, and perspectives who share our world.

For more information about how we process your personal data and your rights, please refer to our Candidate Privacy Notice .