The high capacity and low latency of optical connections are ideal for supporting the current and future communication services, including 5G and beyond. Although some of those services are already secured at the packet layer using standard stream ciphers, like Advanced Encryption Standard (AES) and ChaCha, secure transmission at the optical layer is still not implemented. To secure the optical layer, cryptographic methods need to be fast enough to support high-speed optical transmission and cannot introduce significant delay. Moreover, methods for key exchange, key generation and key expansion are required, which can be implemented on standard coherent transponders. In this paper, we propose Light Path SECurity (LPsec), a secure cryptographic solution for optical connections that involves fast data encryption using stream ciphers and key exchange using Diffie-Hellman (DH) protocol through the optical channel. To support encryption of high-speed data streams, a fast, general purpose Pseudo-Random Number Generator (PRNG) is used. Moreover, to make the scheme more secure against exhaustive search attacks, an additional substitution cipher is proposed. In contrast to the limited encryption speeds that standard stream ciphers can support, LPsec can support high-speed rates. Numerical simulation for 16-QAM, 32-QAM and 64-QAM show that LPsec provides sufficient security level while introducing negligible delay only.