Platform Security Architect
Pubblicato il 11-10-2026 - Deel in Genova
Overview As Deel’s platform security lead, you shape the security architecture across applications, services, and cloud environments with a focus on AWS. You drive secure design patterns, guardrails, and baseline configurations that teams default to. You manage security tooling, CI/CD integration, and threat modeling to reduce exploitable risk. You collaborate with Privacy/Compliance to meet regulatory standards and scale a security program across engineering. This role offers impact at a global scale within a fast-growing SaaS company.
Retribuzione / Benefits
Stock grant opportunities Flexible working office membership (IWG) Additional perks based on country Inclusive workplace with disability accommodations Competitive salary Global remote-friendly role
Responsabilità
Define and own the platform security architecture strategy for applications, services, and cloud (AWS) Operate security tooling program (Wiz, Aikido) and integrate findings with engineering workflows Design identity and access management and multi-tenant/just-in-time access controls Embed security into SDLC and CI/CD with guardrails for code and IaC Secure containers/Kubernetes: image hardening, runtime security, pod security, network policies Own software supply chain security and SBOMs from npm installs to runtime Lead threat modeling and drive engineering remediations from findings Manage vulnerability management and incident response across application and cloud layers Partner with Privacy/Compliance to meet SOC 2 II,
ISO 27001, PCI DSS, GDPR Build Security Champions program and secure coding enablement across teams Influence engineering and cloud strategy; leverage AI to improve security posture Review high-risk designs and vendor decisions; align security with leadership goals Apply AI to security workflows for triage and remediation
Requisiti fondamentali
3+ years in cybersecurity with cloud and application security expertise Deep AWS security knowledge: IAM, network controls, logging/monitoring, data protection Strong application security experience: OWASP Top 10, API Security Top 10, auth design Hands-on experience with Wiz/Orca/Prisma Cloud and Aikido/Snyk/Semgrep/GitHub Advanced Security CI/CD security gates for code and IaC Container/Kubernetes security: image hardening, runtime security, RBAC Threat modeling experience (STRIDE, attack trees) Production code reading/writing in TypeScript/Node.js, Python, Go, or Java Secrets management and encryption patterns (HashiCorp Vault, AWS Secrets Manager) Vulnerability management or bug bounty/pentest program leadership Knowledge of SOC 2 II, ISO 27001, PCI DSS, GDPR Clear technical guidance for engineers and risk-based exec briefings Excellent English communication excellent communication cross-functional collaboration leadership and sponsorship of security initiatives Wiz (or Orca, Prisma Cloud) Aikido (or Snyk, Semgrep, GitHub Advanced Security) CI/CD security integration