LastPass is looking for an experienced and strategic Principal Cloud Security Engineer to partner with its DevOps, CI/CD, and Architects teams, embedding security best practices across cloud infrastructure at scale. As an independent leader in password and identity management helping 100,000 businesses and millions of consumers secure their credentials, LastPass has undergone an extensive security transformation since 2024 and is building a world-class Cloud Security team at the heart of its product and infrastructure development. This is a senior, high-impact role for a security engineering leader who is motivated by complex problem solving, comfortable making the right trade-off decisions, and passionate about delivering secure, innovative solutions to customers at scale.

In this role, you will act as a strategic security leader, defining and driving cloud security principles, standards, and reference architectures across the organisation. You will use your security architecture expertise to help engineers build and securely operate products and services from the ground up, assess, design, and implement security processes and controls to meet security, compliance, and audit requirements, and perform proactive research to identify new threats and attack vectors. You will partner with engineering teams to embed shift-left security practices throughout the software development lifecycle, and implement and manage cloud and Kubernetes security posture management tooling to continuously monitor and reduce risk across containerised workloads.

The ideal candidate brings proven experience working with AWS and AWS security services in a secure production environment, including IAM, Config, KMS, Secrets Manager, CloudWatch, CloudTrail, and GuardDuty. You have proven experience working closely with engineering teams and supporting them on their path to shifting security left, a background with infrastructure as code using AWS CDK, CloudFormation, or Terraform, and experience with version control and CI tools including GitLab and GitLab CI. Hands-on experience with Kubernetes including AWS EKS, containers including Docker and AWS ECS, Kubernetes admission controllers, and Supply Chain Security are required, along with a solid understanding of TCP/IP, TLS, and VPN. Good written and verbal communication skills in English and a collaborative, hands-on approach to problem solving are essential. An AWS Certified Security Specialty certification and familiarity with AI tools and large language models are meaningful advantages.

LastPass offers a remote-first culture, competitive compensation, flexible paid time off including four quarterly self-care days annually and volunteer days, parental leave, comprehensive health coverage including dependents, home office setup support, a LastPass Families free account for up to five members, an annual learning stipend, peer-to-peer recognition through Motivosity, an Employee Assistance Programme, and a remote work stipend.

Apply Now:
To apply, share your CV to gabor.petroczki@lastpass.com
When submitting your application, ensure your CV clearly highlights your AWS and cloud security experience, your hands-on Kubernetes and container security expertise, your infrastructure as code background, and any experience leading security architecture or shift-left security programmes. Include examples of security controls, posture management tooling, or compliance frameworks you have implemented. Your cover letter should explain why you are drawn to the Principal Cloud Security Engineer role at LastPass and reflect your strategic security leadership mindset and ability to operate as a trusted embedded security partner across engineering teams. Feel free to forward this opportunity to anyone in your network who may be a strong fit.

About Us:
LastPass is a leader in password and identity management solutions that helps 100,000 businesses and millions of consumers secure their credentials at work and at home, innovating for a passwordless future by supporting next-generation security solutions that respond to human behaviour, including biometric logins and beyond. Following a separation from parent company GoTo in 2024, LastPass has undergone an extensive security transformation, emerging as a stronger, more innovative, and independent company with an unwavering commitment to security, privacy, and customer satisfaction, implementing an entirely new security and privacy infrastructure and achieving ISO 27701 compliance. The company serves businesses of all sizes from SMBs to enterprise organisations, offering a comprehensive platform spanning password management, multifactor authentication, single sign-on, dark web monitoring, and privileged access management, all built on a zero-knowledge encryption model. LastPass is headquartered in Boston, Massachusetts, and operates as a remote-first, globally distributed organisation.