Staff Cloud Security Engineer

LastPass is looking for a Staff Cloud Security Engineer:

As a Staff Cloud Security Engineer at LastPass, you will collaborate with DevOps, CI/CD engineers, and the architecture team to implement and uphold security best practices across our infrastructure.

About the Team:

The Product Security team at LastPass is seeking a Staff Cloud Security Engineer to help safeguard the privacy and security of our company and user data. As part of a skilled team of application and cloud security engineers, you will collaborate closely with our engineering, platform, and trust & security teams to drive security excellence across our systems.

If you are passionate about complex problem solving and motivated by scale, then this is the role for you!

Who will you work with?

As a Staff Cloud Security Engineer at LastPass, you will collaborate with DevOps, CI/CD engineers, and the architecture team to implement and maintain security best practices across our infrastructure.

What are some of the exciting challenges you will be working on?

• Leverage your expertise in security architecture to help engineers design, build, and securely operate products and services from the ground up.
• Assess, design, and implement security processes and controls to meet security, compliance, and audit requirements.
• Conduct proactive research to identify emerging threats and attack vectors.
• Collaborate within a highly agile product security team and work cross-functionally with other teams to enhance security across the organization.

What does it take to work at LastPass?

• Proven experience working with AWS in a security-focused capacity.
• Experience collaborating with engineering teams to "shift security left" and integrate security into the development lifecycle.
• Hands-on experience with infrastructure as code (AWS CDK, CloudFormation, or Terraform).
• Strong knowledge of AWS security services and best practices for securing production environments (AWS IAM, Config, KMS, Secrets Manager, CloudWatch, CloudTrail, GuardDuty).
• Familiarity with version control, CI/CD, and issue tracking tools (GitLab, GitLab CI, Jira).
• Solid understanding of internet and computer networks (TCP/IP, TLS, VPN, etc.).
• Hands-on experience with Kubernetes, particularly securing workloads on AWS EKS.
• Experience securing containerized workloads (Docker).
• Strong written and verbal communication skills in English.
• A team-oriented mindset with a proactive and hands-on approach to problem-solving.

It's great, but not required:

• AWS Certified Security – Specialty certification or a similar credential.
• Experience with GitOps, CSPM, KSPM, Kubernetes (K8s) admission control, and supply chain security.