Skip to main content
LastPass

Principal Cloud Security Engineer

RemotePortugal only
Published
Role
Security
Experience
Principal
Employment
Full-time
Salary not disclosed
Check eligibility

Open to PT only. Set where you work from to check your eligibility.

No BS summary

Principal cloud security engineer for LastPass, remote in Portugal. Needs strong AWS security, Kubernetes/container security, IaC, CI/CD, and English communication. You’ll lead cloud security standards and embed shift-left security with engineering teams.

Core skills

Infrastructure as CodeAWS SecurityKubernetes Security

Required skills

AWSIAMAWS ConfigAWS KMSAWS Secrets ManagerAmazon CloudWatchAWS CloudTrailAmazon GuardDutyAWS CDK/AWS CloudFormation/TerraformGitLabGitLab CIKubernetesAmazon EKSDockerAmazon ECSKubernetes admission controllersSupply Chain SecurityTCP/IPTLSVPN

Optional skills

AWS Certified Security – SpecialtyAI toolsLarge language modelsClaudeAWS Bedrock

Required languages

English Good written and verbal communication skills in English; required=true

What you'll do

  • Act as a strategic security leader by defining and driving cloud security principles, standards, and reference architectures across the organization
  • Use your knowledge of security architecture to help engineers build and securely operate products and services from the ground up
  • Assess, design, and implement security processes and controls to meet security, compliance, and audit requirements
  • Perform proactive research to identify new threats and attack vectors
  • Partner with engineering teams to embed shift-left security practices throughout the software development lifecycle
  • Implement and manage cloud and Kubernetes security posture management tooling to continuously monitor and reduce risk across containerized workloads

What they require

  • Proven experience working with AWS and AWS security services in a secure production environment, including IAM, Config, KMS, Secrets Manager, CloudWatch, CloudTrail, and GuardDuty
  • Proven experience working closely with engineering teams and supporting them on their path to shifting security left
  • Background with infrastructure as code (AWS CDK, CloudFormation, or Terraform), version control and CI tools such as GitLab and GitLab CI
  • Hands-on experience with Kubernetes (AWS EKS), containers (Docker, AWS ECS), K8s admission controllers and Supply Chain Security
  • Solid understanding of internet and computer network protocols, including TCP/IP, TLS, and VPN
  • Good written and verbal communication skills in English
  • Collaborative team player with a hands-on, can-do approach to problem solving
  • Preferred: AWS Certified Security – Specialty certification or similar.
  • Preferred: General familiarity with AI tools and large language models (e.g., Claude by Anthropic, AWS Bedrock)

Benefits

  • High-growth, collaborative environment with inclusive teams
  • Remote-first culture
  • Competitive compensation
  • Flexible Paid Time Off policies, including but not limited to: Quarterly Self-Care Days (4 extra paid days off annually) and Volunteer Days
  • Parental leave
  • Comprehensive health coverage, including dependents
  • Home office setup support
  • LastPass Families free account for up to 5 members
  • Continuous learning and development opportunities, including an annual learning stipend to invest in your growth
  • Peer-to-peer recognition through Motivosity
  • Employee Assistance Program for well-being support
  • Remote work stipend to support your home office needs
  • Short-Term or Remote-Centric Work Arrangements for added flexibility

LastPass delivers Secure Access Essentials, helping individuals and organizations manage and protect access to AI, applications, and credentials straight from the browser.

Cybersecuritylastpass.com

Details

Apply routeGreenhouse
Salary not disclosed