Devsecops Engineer

Deel; Brasil; Remote; BRL 180,000 - 280,000; Full time

Benefits offered by this job

Stock options

Remote work flexibility

WeWork membership option

Job summary

Deel is hiring a DevSecOps Engineer to advance our security automation and secure infrastructure in a fully remote, international team. You will build, monitor, and refine security tooling within CI/CD pipelines and collaborate across developers, security, and operations to embed secure coding practices.

The role requires 3+ years in security-related roles, experience with policy-as-code and IaC scanners, and proficiency in JavaScript/TypeScript/Python.

Qualifications

• 3+ years in Security, SecOps, or DevSecOps roles.
• Experience with policy-as-code and IaC security scanners.
• Basic programming in JavaScript, TypeScript, and Python.
• Knowledge of CI/CD pipelines and Git.
• Familiar with WAF management and cloud security basics.
• Understanding of OWASP Top 10 and secure coding practices.

Responsibilities

• Develop and maintain automated security tools and CI/CD integration.
• Design and implement secure cloud infrastructure with access controls.
• Implement proactive security monitoring and incident response.
• Collaborate across development, security, and operations teams.
• Assist in compliance assessments and audits with required documentation.

Skills

Security experience

JavaScript

TypeScript

Python

CI/CD

Git

WAF management

Cloud security

Policy as code

IaC security tooling

Tools

Checkov

tfsec

Terrascan

Job description

Who We Are Is What We Do.

Deel is the all-in-one payroll and HR platform for global teams. Our vision is to unlock global opportunity for every person, team, and business. Built for the way the world works today, Deel combines HRIS, payroll, compliance, benefits, performance, and equipment management into one seamless platform. With AI-powered tools and a fully owned payroll infrastructure, Deel supports every worker type in 150+ countries—helping businesses scale smarter, faster, and more compliantly.

Among the largest globally distributed companies in the world, our team of 7,000 spans more than 100 countries, speaks 74 languages, and brings a connected and dynamic culture that drives continuous learning and innovation for our customers.

Why should you be part of our success story?

As the fastest-growing Software as a Service (SaaS) company in history, Deel is transforming how global talent connects with world-class companies – breaking down borders that have traditionally limited both hiring and career opportunities. We're not just building software; we're creating the infrastructure for the future of work, enabling a more diverse and inclusive global economy. In 2024 alone, we paid $11.2 billion to workers in nearly 100 currencies and provided healthcare and benefits to workers in 109 countries—ensuring people get paid and protected, no matter where they are.

Our momentum is reflected in our achievements and customer satisfaction: CNBC Disruptor 50, Forbes Cloud 100, Deloitte Fast 500, and repeated recognition on Y Combinator's top companies list – all while maintaining a 4.83 average rating from 15,000 reviews across G2, Trustpilot, Captera, Apple and Google.

Your experience at Deel will be a career accelerator. At the forefront of the global work revolution, you'll tackle complex challenges that impact millions of people's working lives. With our momentum—backed by a $17.3 billion valuation and $1 B in Annual Recurring Revenue (ARR) in just over five years—you'll drive meaningful impact while building expertise that makes you a sought-after leader in the transformation of global work.

We are currently seeking a DevSecOps Engineer to join our team.

Responsibilities

Security Automation: Develop and maintain automated security tools and processes to identify vulnerabilities, perform code analysis, monitor systems and conduct security testing. This includes integrating security scanners, static code analysis tools, and vulnerability assessment tools into the CI/CD pipeline.

Secure Infrastructure: Work with infrastructure and operations teams to design and implement secure cloud infrastructure, network architecture, and deployment processes. This involves ensuring proper access controls, encryption, and monitoring are in place.

Continuous Monitoring: Implement security monitoring tools and processes to proactively identify and respond to security events and anomalies. This includes log analysis, intrusion detection, and system monitoring.

Collaboration and Communication: Foster collaboration and communication between development, operations, and security teams. Act as a liaison to ensure that security requirements are understood and integrated into the development process.

Compliance and Auditing: Assist in compliance assessments and audits to ensure adherence to regulatory requirements and industry standards. Collaborate with auditors and provide necessary documentation and evidence of security controls.

Desired Skills And Experience

• 3+ years in Security, SecOps, or DevSecOps roles
• Hands-on experience creating, identifying and fixing infrastructure misconfigurations using policy-as-code and IaC security scanning tools such as Checkov, tfsec, or Terrascan.
• Basic programming skills in JavaScript, TypeScript, Python; experience with version control (e.g., Git) and CI/CD pipelines.
• Manage and tune WAF and firewall configurations (e.g., Cloudflare or equivalent) to protect
• Familiarity with security principles, standards, and best practices, including common vulnerabilities (e.g., OWASP Top 10), secure coding, encryption, authentication, access control, and security testing.
• Proficiency in methodologies and tools, including understanding CI/CD pipelines, infrastructure automation (e.g., Docker, Kubernetes), configuration management, and monitoring/observability.
• Ability to assess risks and apply security controls, encompassing an understanding of threat modeling, risk assessment techniques, vulnerability management, and incident response planning.
• Effective collaboration with cross-functional teams (developers, security, operations), promoting security practices, and integrating security seamlessly into the development process.
• Proficiency in automation tools; knowledge of security scanners (e.g., SAST, DAST), vulnerability management systems, log analysis tools, and security-focused frameworks for automating security processes.
• While not mandatory, possessing relevant security certifications is considered advantageous, enhancing credibility and demonstrating commitment to security practices.

Rémunération Globale

Nos collaborateurs méritent une rémunération juste et compétitive qui s'adapte à leur réalité. Avec des avantages sociaux et des gratifications évolutives, notre programme de rémunération globale reflète notre engagement en faveur de l'inclusion et de l'accessibilité pour tous.

Ce Dont Vous Bénéficierez

• Des opportunités d'attribution d'actions (stock options) selon votre rôle, votre statut d'emploi et votre localisation.
• Des avantages et privilèges supplémentaires basés sur votre statut d'emploi et votre pays.
• La flexibilité du travail à distance, incluant un accès optionnel aux espaces WeWork.

Égalité des chances et Diversité

Chez Deel, nous sommes un employeur garantissant l'égalité des chances. Nous valorisons la diversité et encourageons vivement les candidatures de personnes qualifiées, sans distinction de race, de religion, de sexe, d'origine nationale, d'identité de genre, d'orientation sexuelle, d'âge, d'état civil, de statut de vétéran, de handicap, de grossesse ou de maternité, ou de toute autre caractéristique protégée par la loi.

Sauf accord contraire, nous communiquons avec les candidats via des adresses e-mail spécifiques à Deel (se terminant par @deel.com ou celles de sociétés acquises comme @payspace.com et @paygroup.com). Vous pouvez consulter nos offres d'emploi à jour sur notre page carrières.

Accessibilité et Processus de Recrutement

Deel s'engage à offrir des aménagements sur demande tout au long du processus de recrutement, de sélection et d'évaluation pour les candidats en situation de handicap. Si vous avez besoin d'un aménagement, veuillez en informer notre équipe d'acquisition de talents via ce lien ; un membre de l'équipe vous contactera pour garantir votre participation équitable. En cas de difficulté d'accès au formulaire, contactez-nous à [e-mail].

Notre processus repose principalement sur des entretiens et des évaluations liées au poste. Dans certains cas restreints, nous pouvons examiner des informations contextuelles informelles pertinentes pour le rôle, conformément à nos obligations de confidentialité et d'équité.

Utilisation de l'IA et de la Technologie

Ce processus de candidature utilise des outils d'aide à la décision automatisée (AEDT) et des systèmes d'IA pour évaluer les candidats en fonction de leur niveau d'expérience, de leurs compétences techniques et de leurs qualifications. En tant qu'entreprise 100 % en télétravail, nous utilisons également des technologies de détection de fraude et de deepfake propulsées par l'IA pour vérifier l'authenticité de l'identité des candidats lors des évaluations. Ce traitement est effectué dans le respect des lois sur la protection des données, la gouvernance de l'IA et le droit du travail. Nous garantissons qu'une supervision humaine est maintenue pour toutes les décisions finales d'embauche. Vos données personnelles ne sont pas utilisées pour entraîner des modèles d'IA. Pour plus d'informations, consultez notre Politique de Confidentialité.

Note pour les résidents de New York : Conformément à la loi locale 144 de NYC, un audit indépendant sur les biais a été réalisé sur nos outils AEDT.

Total Rewards

Our workforce deserves fair and competitive pay that meets them where they are. With scalable benefits, rewards, and perks, our total rewards programs reflect our commitment to inclusivity and access for all.

• Our salary range reflects gross base salary. For commercial roles with commission eligibility, this figure represents On-Target Earnings (OTE), inclusive of base salary and target commission.
• Salary ranges are quoted in USD as a consistent global reference. Your offer will be localized to your country's currency using a market-aligned conversion.
• Final pay is based on objective, job-related criteria including experience, skills, and location.
• We don't ask about salary history. Offers are based on the role and what you bring to it.

Some things you'll enjoy

• Stock grant opportunities dependent on your role, employment status and location
• Additional perks and benefits based on your employment status and country
• Optional flexible working office membership, with IWG

At Deel, we're an equal-opportunity employer that values diversity and positively encourage applications from suitably qualified and eligible candidates regardless of race, religion, sex, national origin, gender, sexual orientation, age, marital status, veteran status, disability status, pregnancy or maternity or other applicable legally protected characteristics.

Unless otherwise agreed, we will communicate with job applicants using Deel-specific emails, which include @deel.com and other acquired company emails like @payspace.com and @paygroup.com. You can view the most up-to-date job listings at Deel by visiting our careers page.

Deel welcomes persons with disabilities to apply to any of our open roles. We will provide application and/or interview accommodations on request throughout the recruitment, selection and assessment process for applicants with disabilities or other needs. If you require application and/or interview accommodations, please inform our Talent Acquisition Team via email ([e-mail]) and a team member will be in touch to ensure your equal participation.

As part of our hiring process, we primarily rely on interviews and role-related assessments. In limited cases, we may also consider informal background information relevant to the role, in line with our privacy and fairness obligations.

This application process may utilise Automated Employment Decision Tools (AEDT) and AI systems to assist in evaluating candidates based on experience level, technical skills and qualifications. This processing is conducted in compliance with applicable Data Protection, AI Governance and Labour Laws. We ensure human oversight is maintained in all final hiring decisions. Your personal data is not used to train AI models. For more information on how we process your personal data, please see our Recruitment Privacy Policy.

• For NYC Residents: In accordance with NYC Local Law 144, an independent bias audit has been conducted on AEDT