Lead Cloud Security Engineer – Remote-First

PVH (Tommy Hilfiger/Calvin Klein); Ireland; On-site; EUR 120,000 - 165,000; Full time

Benefits offered by this job

Remote-first culture

Competitive compensation

Flexible PTO

Parental leave

Health coverage for dependents

Home office setup

Learning stipend

Remote work stipend

Employee assistance program

Job summary

LastPass is seeking a Principal Cloud Security Engineer to partner with DevOps, CI/CD and Architects to embed security across our cloud infrastructure. You will scale security and help craft secure-by-design products in a fast-growing environment.

You will collaborate with engineering teams, trust & security, and platform groups to implement security controls, threat modeling, and lifecycle security across services.

Qualifications

• Proven experience with AWS security services in production.
• Experience enabling shift-left security with engineering teams.
• Hands-on with IaC (CDK/CloudFormation/Terraform) and CI tools.
• Experience with Kubernetes security (EKS) and container security.
• Strong written and spoken English.

Responsibilities

• Define and drive cloud security principles, standards, and reference architectures.
• Help engineers build and securely operate products from ground up.
• Assess, design, and implement security processes to meet audits.
• Perform proactive threat research and risk reduction.
• Embed shift-left security across the software development lifecycle.
• Monitor and reduce risk with cloud and Kubernetes security tooling.

Skills

AWS security services

Cloud security architecture

Kubernetes

Infrastructure as code

CI/CD collaboration

GitLab CI

Threat modeling

Networking concepts

English communication

Team leadership

Tools

AWS CDK

CloudFormation

Terraform

GitLab

Kubernetes

Docker

AWS EKS

IAM

Job description

LastPass is seeking a Principal Cloud Security Engineer to partner with DevOps, CI/CD and Architects to embed security across our cloud infrastructure. You will scale security and help craft secure-by-design products in a fast-growing environment.

You will collaborate with engineering teams, trust & security, and platform groups to implement security controls, threat modeling, and lifecycle security across services.