Security Architect
3 giorni fa
La Spezia SP, Provincia di La Spezia; Liguria, Italia
Deel
Tempo pieno
Gratuito con email o Google
Salva questo lavoro e mantieni la tua ricerca organizzata
Crea un account gratuito per salvare lavori, creare avvisi e tornare a questa inserzione dalla tua dashboard.
Gratuito con email o Google
Continuando accetti i nostri Termini & Informativa sulla privacy.
Overview As Deel's platform security lead, you shape the security architecture across applications, services, and cloud environments with a focus on AWS. You drive secure design patterns, guardrails, and baseline configurations that teams default to. You manage security tooling, CI/CD integration, and threat modeling to reduce exploitable risk. You collaborate with Privacy/Compliance to meet regulatory standards and scale a security program across engineering. This role offers impact at a global scale within a fast-growing SaaS company.
Retribuzione / Benefits
Flexible working office membership (IWG)
Inclusive workplace with disability accommodations
Global remote-friendly role
Define and own the platform security architecture strategy for applications, services, and cloud (AWS)
Operate security tooling program (Wiz, Aikido) and integrate findings with engineering workflows
Design identity and access management and multi-tenant/just-in-time access controls
Embed security into SDLC and CI/CD with guardrails for code and IaC
Secure containers/Kubernetes: image hardening, runtime security, pod security, network policies
Own software supply chain security and SBOMs from npm installs to runtime
Lead threat modeling and drive engineering remediations from findings
Manage vulnerability management and incident response across application and cloud layers
Partner with Privacy/Compliance to meet SOC 2 II, ISO 27001, PCI DSS, GDPR
Build Security Champions program and secure coding enablement across teams
Influence engineering and cloud strategy; leverage AI to improve security posture
align security with leadership goals
Apply AI to security workflows for triage and remediation
3+ years in cybersecurity with cloud and application security expertise
~ Deep AWS security knowledge: IAM, network controls, logging/monitoring, data protection
~ Strong application security
experience:
OWASP Top 10, API Security Top 10, auth design ~ Hands-on experience with Wiz/Orca/Prisma Cloud and Aikido/Snyk/Semgrep/GitHub Advanced Security ~ CI/CD security gates for code and IaC ~ Container/Kubernetes security: image hardening, runtime security, RBAC ~ Threat modeling experience (STRIDE, attack trees) ~ Production code reading/writing in TypeScript/Node.js, Python, Go, or Java ~ Secrets management and encryption patterns (HashiCorp Vault, AWS Secrets Manager) ~ Vulnerability management or bug bounty/pentest program leadership ~ Knowledge of SOC 2 II, ISO 27001, PCI DSS, GDPR ~ Clear technical guidance for engineers and risk-based exec briefings ~ Excellent English communication ~ cross-functional collaboration ~ leadership and sponsorship of security initiatives ~ Wiz (or Orca, Prisma Cloud) ~ Aikido (or Snyk, Semgrep, GitHub Advanced Security) ~ CI/CD security integration
experience:
OWASP Top 10, API Security Top 10, auth design ~ Hands-on experience with Wiz/Orca/Prisma Cloud and Aikido/Snyk/Semgrep/GitHub Advanced Security ~ CI/CD security gates for code and IaC ~ Container/Kubernetes security: image hardening, runtime security, RBAC ~ Threat modeling experience (STRIDE, attack trees) ~ Production code reading/writing in TypeScript/Node.js, Python, Go, or Java ~ Secrets management and encryption patterns (HashiCorp Vault, AWS Secrets Manager) ~ Vulnerability management or bug bounty/pentest program leadership ~ Knowledge of SOC 2 II, ISO 27001, PCI DSS, GDPR ~ Clear technical guidance for engineers and risk-based exec briefings ~ Excellent English communication ~ cross-functional collaboration ~ leadership and sponsorship of security initiatives ~ Wiz (or Orca, Prisma Cloud) ~ Aikido (or Snyk, Semgrep, GitHub Advanced Security) ~ CI/CD security integration