h3Overview /h3 pAs the platform security lead, you will shape Deel's security posture across applications, services, and cloud environments with a focus on AWS. You’ll define secure patterns, run an integrated security tooling program, and embed guardrails into SDLC and CI/CD. You’ll own identity and access controls, container and Kubernetes security, and software supply chain defense, while partnering with Compliance to meet standards. You’ll operate at leadership level to drive secure design, risk reduction, and continuous improvement using AI. This role offers a high-impact opportunity to secure a global, fast-growing fintech/HR platform. /p h3Retribuzione / Benefits /h3 ul liStock grant opportunities /li liOptional flexible working office membership /li liAdditional perks based on country and status /li liInclusive, equal-opportunity employer /li /ul h3Responsabilità /h3 ul liOwn platform security architecture strategy across applications, services, and cloud (AWS) with default secure patterns. /li liOperate security tooling program (Wiz, Aikido) and ensure findings translate into actionable fixes. /li liDesign and own IAM and application authentication/authorization, including multi-tenant isolation. /li liEmbed security into SDLC and CI/CD with guardrails for code and IaC. /li liSecure containers and Kubernetes including image hardening, runtime protection, and network policies. /li liOwn software supply chain security from dependencies to artifact provenance. /li liLead threat modeling and integrate it into engineering design processes. /li liManage vulnerability management and coordinate remediation with engineering teams. /li liLead security incident response across application and cloud layers.



/li liPartner with Privacy/Compliance to satisfy SOC 2 II, ISO 27001, PCI DSS, and GDPR. /li liScale security through a Security Champions program and secure coding enablement. /li liAct as technical authority on platform security and influence cloud strategy at leadership level. /li liLeverage AI to improve security posture and secure AI features. /li /ul h3Requisiti fondamentali /h3 ul li3+ years in cybersecurity with cloud security and application security depth. /li liDeep AWS security expertise: IAM, network controls, logging/monitoring, data protection. /li liDeep application security knowledge: OWASP Top 10, API security, auth design, injection, SSRF, secure sessions. /li liHands‑on experience with Wiz or Orca/Prisma Cloud and Aikido or Snyk/Semgrep/GitHub Advanced Security. /li liCI/CD security gates for code and IaC. /li liContainer and Kubernetes security: image hardening, runtime security, pod security, RBAC. /li liThreat modeling experience (STRIDE, attack trees). /li liAbility to read and write production code in at least one language (TypeScript/Node.js, Python, Go, or Java). /li liSecrets management (HashiCorp Vault, AWS Secrets Manager) and encryption patterns. /li liVulnerability management or bug bounty/pentest program experience. /li liKnowledge of SOC 2 II, ISO 27001, PCI DSS, and GDPR. /li liAbility to translate complex security concepts into guidance for engineers and executives. /li liExcellent English, written and verbal. /li /ul ul liclear communication /li licross-functional collaboration /li lirisk-based decision making /li liAWS IAM design and cloud controls /li liCloud security monitoring (CloudTrail, Security Hub, GuardDuty) /li liSAST/DAST/SCA tools (Aikido, Snyk, Semgrep, GitHub Advanced Security) /li /ul #J-18808-Ljbffr

📌 Platform Security Architect (Verona)
🏢 Deel
📍 Verona