Principal Cloud Security Engineer

LastPass is hiring a Principal Cloud Security Engineer to work with DevOps and CI/CD engineers and the company's Architects team, making sure security practices are built into cloud infrastructure. The role is for an experienced security engineering leader who can scale security and make trade-off decisions that still let teams ship. This is a remote-first company, and the listing is for the United Kingdom.

What you will do

• Define and drive cloud security principles, standards, and reference architectures across the organization.
• Use security architecture knowledge to help engineers build and securely operate products and services from the ground up.
• Assess, design, and implement security processes and controls to meet security, compliance, and audit requirements.
• Do proactive research to identify new threats and attack vectors.
• Partner with engineering teams to embed shift-left security practices throughout the software development lifecycle.
• Implement and manage cloud and Kubernetes security posture management tooling to continuously monitor and reduce risk across containerized workloads.

Who you will work with

You will work closely with DevOps and CI/CD engineers, Cloud Architects, and cross-functional engineering teams across LastPass. You will also collaborate with the Trust & Security and Platform teams, acting as an embedded security partner throughout product and infrastructure development to drive secure-by-design outcomes at every stage.

What they are looking for

• Proven experience working with AWS and AWS security services in a secure production environment, including IAM, Config, KMS, Secrets Manager, CloudWatch, CloudTrail, and GuardDuty.
• Proven experience working closely with engineering teams and supporting them on their path to shifting security left.
• Background with infrastructure as code (AWS CDK, CloudFormation, or Terraform), version control and CI tools such as GitLab and GitLab CI.
• Hands-on experience with Kubernetes (AWS EKS), containers (Docker, AWS ECS), K8s admission controllers, and Supply Chain Security.
• Solid understanding of internet and computer network protocols, including TCP/IP, TLS, and VPN.
• Good written and verbal communication skills in English.
• Collaborative team player with a hands-on, can-do approach to problem solving.

Nice to have, but not required

• AWS Certified Security – Specialty certification or similar.
• General familiarity with AI tools and large language models (e.g., Claude by Anthropic, AWS Bedrock).

About LastPass

LastPass delivers Secure Access Essentials, helping individuals and organizations manage and protect access to AI, applications, and credentials from the browser. The company says it is trusted by more than 100,000 businesses and millions of users worldwide. Its stated mission is to give everyone access to what they need to work, move fast, and stay protected as their environments evolve.

What LastPass offers

• Remote-first culture.
• Competitive compensation.
• Flexible paid time off policies, including quarterly self-care days (4 extra paid days off annually) and volunteer days.
• Parental leave.
• Health coverage, including dependents.
• Home office setup support.
• LastPass Families free account for up to 5 members.
• Learning and development opportunities, including an annual learning stipend.
• Peer-to-peer recognition through Motivosity.
• Employee Assistance Program for well-being support.
• Remote work stipend.
• Short-term or remote-centric work arrangements for added flexibility.

LastPass describes itself as building an inclusive community that reflects people of all races, genders, sexual orientations, national origins, backgrounds, and perspectives.