Platform Security Architect
Pubblicato il 13-10-2026 - Deel in Italia
Overview
As Deel’s platform security lead, you shape the security architecture across applications, services, and cloud environments with a focus on AWS. You drive secure design patterns, guardrails, and baseline configurations that teams default to. You manage security tooling, CI/CD integration, and threat modeling to reduce exploitable risk.
You collaborate with Privacy/Compliance to meet regulatory standards and scale a security program across engineering. This role offers impact at a global scale within a fast-growing SaaS company.
Retribuzione / Benefits
- Stock grant opportunities
- Flexible working office membership (IWG)
- Additional perks based on country
- Inclusive workplace with disability accommodations
- Competitive salary
- Global remote-friendly role
Responsabilità
- Define and own the platform security architecture strategy for applications, services, and cloud (AWS)
- Operate security tooling program (Wiz, Aikido) and integrate findings with engineering workflows
- Design identity and access management and multi-tenant/just-in-time access controls
- Embed security into SDLC and CI/CD with guardrails for code and IaC
- Secure containers/Kubernetes: image hardening, runtime security, pod security, network policies
- Own software supply chain security and SBOMs from npm installs to runtime
- Lead threat modeling and drive engineering remediations from findings
- Manage vulnerability management and incident response across application and cloud layers
- Partner with Privacy/Compliance to meet SOC 2 II, ISO 27001,
PCI DSS, GDPR
- Build Security Champions program and secure coding enablement across teams
- Influence engineering and cloud strategy; leverage AI to improve security posture
- Review high-risk designs and vendor decisions; align security with leadership goals
- Apply AI to security workflows for triage and remediation
Requisiti fondamentali
- 3+ years in cybersecurity with cloud and application security expertise
- Deep AWS security knowledge: IAM, network controls, logging/monitoring, data protection
- Strong application security experience: OWASP Top 10, API Security Top 10, auth design
- Hands-on experience with Wiz/Orca/Prisma Cloud and Aikido/Snyk/Semgrep/GitHub Advanced Security
- CI/CD security gates for code and IaC
- Container/Kubernetes security: image hardening, runtime security, RBAC
- Threat modeling experience (STRIDE, attack trees)
- Production code reading/writing in TypeScript/Node.js, Python, Go, or Java
- Secrets management and encryption patterns (HashiCorp Vault, AWS Secrets Manager)
- Vulnerability management or bug bounty/pentest program leadership
- Knowledge of SOC 2 II, ISO 27001, PCI DSS, GDPR
- Clear technical guidance for engineers and risk-based exec briefings
- Excellent English communication
- excellent communication
- cross-functional collaboration
- leadership and sponsorship of security initiatives
- Wiz (or Orca, Prisma Cloud)
- Aikido (or Snyk, Semgrep, GitHub Advanced Security)
- CI/CD security integration