Remote-First Principal Cloud Security Engineer

LastPass; Portugal; Presencial; EUR 90 000 - 150 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Remote-first culture

Learning stipend

Health coverage

Home office setup support

Paid time off

Resumo da oferta

LastPass is hiring a Principal Cloud Security Engineer to lead security across our cloud infrastructure. You will collaborate with DevOps, Cloud Architects, and cross-functional teams to embed secure-by-design practices from development through deployment.

The role emphasizes scalable security leadership, threat modeling, and implementing controls to meet compliance and audit requirements in a remote-first environment.

Qualificações

• Experience with AWS security services in production: IAM, Config, KMS, Secrets Manager, CloudWatch/Trail, GuardDuty.
• Infrastructure as code: AWS CDK/CloudFormation/Terraform; version control and CI tools like GitLab.
• Hands-on Kubernetes (AWS EKS), containers (Docker) and K8s admission controllers; Supply Chain Security.

Responsabilidades

• Define and drive cloud security principles, standards, and reference architectures.
• Embed shift-left security across the SDLC with engineering teams.
• Design, implement, and monitor security processes and controls for compliance and audits.
• Proactively research threats and attack vectors to reduce risk.
• Partner with engineering to secure products and infrastructure from ground up.

Conhecimentos

AWS security

Security architecture

Kubernetes security

Shift-left security

CI/CD collaboration

Networking basics

Ferramentas

AWS CDK

CloudFormation

Terraform

GitLab

GitLab CI

Kubernetes (EKS)

Docker

Descrição da oferta de emprego

LastPass is hiring a Principal Cloud Security Engineer to lead security across our cloud infrastructure. You will collaborate with DevOps, Cloud Architects, and cross-functional teams to embed secure-by-design practices from development through deployment.

The role emphasizes scalable security leadership, threat modeling, and implementing controls to meet compliance and audit requirements in a remote-first environment.