Platform Security Architect

Overview In this role you drive Deel's platform security across applications, services, and cloud environments, primarily AWS. You will design secure patterns, guardrails, and baseline configurations, ensuring secure SDLC integration and by-default security. You’ll lead threat modeling, vulnerability management, and platform incident response while aligning with compliance standards. You’ll partner with cross-functional teams to scale security across engineering and product, enabling a safer global platform. This is a chance to shape security at scale in a fast-growing fintech/HR tech environment. Retribuzione / Benefits
* Stock grant opportunities
* Optional flexible working office membership
* Competitive total rewards and benefits
* Supportive, inclusive culture Responsabilità
* Define and own platform security architecture strategy across applications, services, and cloud environments (AWS focused).
* Operate and tune cloud security tooling (Wiz, Aikido) for posture, SAST/DAST, secrets detection, and integration with engineering workflows.
* Design identity and access controls at all layers, including IAM, multi-tenant isolation, and token handling.
* Embed security into SDLC and CI/CD with guardrails for code and IaC.
* Secure containers and Kubernetes with image hardening, runtime security, and network policies.
* Own software supply chain security including SBOMs, dependency risk, and provenance.
* Lead threat modeling and translate findings into engineering work.
* Manage vulnerability management and remediation programs with engineering partners.
* Lead security incident response across application and cloud layers, including post-incident hardening.
* Collaborate with Privacy/Compliance to meet SOC 2 II, ISO 27001, PCI DSS, and GDPR; design decisions must be defensible and auditable.
* Scale security through a Security Champions program and secure coding enablement.
* Act as technical authority on platform security and influence engineering/cloud strategy at leadership level.
* Leverage AI to improve security posture and secure AI features deployed by Deel. Requisiti fondamentali
* 3+ years in cybersecurity with cloud and application security depth
* Deep AWS security expertise (IAM, network controls, logging/monitoring, data protection)
* Strong app security knowledge (OWASP Top 10, API Security Top 10, authN/authZ)
* Hands-on experience with security platforms (Wiz, Orca, Prisma Cloud) and Aikido tools (Snyk, Semgrep, GitHub Advanced Security)
* Experience integrating security gates into CI/CD for code and IaC
* Container and Kubernetes security expertise (image hardening, runtime security, RBAC)
* Threat modeling experience (STRIDE or similar)
* Ability to read and write production code (TypeScript/Node.js, Python, Go, or Java)
* Secrets management and encryption for data at rest/in transit
* Experience running vulnerability management or bug bounty programs
* Strong knowledge of SOC 2 II, ISO 27001, PCI DSS, GDPR
* Ability to translate security concepts into actionable guidance for engineers and executives
* Excellent English (written and verbal)
* desirable: background in DevSecOps/platform engineering and experience with multi-cloud environments
* desirable: offensive security background and experience securing multi-tenant SaaS and AI features
* strong communication and collaboration
* ability to translate complex concepts for engineers and executives
* leadership and program-building capabilities
* Wiz
* Aikido
* Snyk