Overview
In this role you drive Deel's platform security across applications, services, and cloud environments, primarily AWS. You will design secure patterns, guardrails, and baseline configurations, ensuring secure SDLC integration and by-default security. You'll lead threat modeling, vulnerability management, and platform incident response while aligning with compliance standards. You'll partner with cross-functional teams to scale security across engineering and product, enabling a safer global platform. This is a chance to shape security at scale in a fast-growing fintech/HR tech environment.
Retribuzione / Benefits
Stock grant opportunities
Optional flexible working office membership
Competitive total rewards and benefits
Supportive, inclusive culture
Responsabilità
Define and own platform security architecture strategy across applications, services, and cloud environments (AWS focused).
Operate and tune cloud security tooling (Wiz, Aikido) for posture, SAST/DAST, secrets detection, and integration with engineering workflows.
Design identity and access controls at all layers, including IAM, multi-tenant isolation, and token handling.
Embed security into SDLC and CI/CD with guardrails for code and IaC.
Secure containers and Kubernetes with image hardening, runtime security, and network policies.
Own software supply chain security including SBOMs, dependency risk, and provenance.
Lead threat modeling and translate findings into engineering work.
Manage vulnerability management and remediation programs with engineering partners.
Lead security incident response across application and cloud layers, including post-incident hardening.
Collaborate with Privacy/Compliance to meet SOC 2 II, ISO *****, PCI DSS,



and GDPR; design decisions must be defensible and auditable.
Scale security through a Security Champions program and secure coding enablement.
Act as technical authority on platform security and influence engineering/cloud strategy at leadership level.
Leverage AI to improve security posture and secure AI features deployed by Deel.
Requisiti fondamentali
3+ years in cybersecurity with cloud and application security depth
Deep AWS security expertise (IAM, network controls, logging/monitoring, data protection)
Strong app security knowledge (OWASP Top 10, API Security Top 10, authN/authZ)
Hands-on experience with security platforms (Wiz, Orca, Prisma Cloud) and Aikido tools (Snyk, Semgrep, GitHub Advanced Security)
Experience integrating security gates into CI/CD for code and IaC
Container and Kubernetes security expertise (image hardening, runtime security, RBAC)
Threat modeling experience (STRIDE or similar)
Ability to read and write production code (TypeScript/Node.js, Python, Go, or Java)
Secrets management and encryption for data at rest/in transit
Experience running vulnerability management or bug bounty programs
Strong knowledge of SOC 2 II, ISO *****, PCI DSS, GDPR
Ability to translate security concepts into actionable guidance for engineers and executives
Excellent English (written and verbal)
desirable: background in DevSecOps/platform engineering and experience with multi-cloud environments
desirable: offensive security background and experience securing multi-tenant SaaS and AI features
strong communication and collaboration
ability to translate complex concepts for engineers and executives
leadership and program-building capabilities
Wiz
Aikido
Snyk

📌 Platform Security Architect (Ravenna)
🏢 Deel
📍 Ravenna