Application Security Architect

Deel; Colombia; Presencial; COP 280.260.000 - 404.820.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Stock grants

Flexible office membership

Descripción de la vacante

Deel is the all-in-one payroll and HR platform for global teams. The Application Security Architect will lead security across Deel’s product, guiding R&D teams to design secure software, perform threat modeling, code reviews, and penetration testing, and respond to security questions from developers and customers.

You will coordinate third-party assessments, stay current with MITRE/OWASP frameworks, and partner with product and DevOps to embed security into every stage of development, while

Formación

• 3+ years in Application Security or Cloud Security within R&D.
• Experience with secure coding techniques.
• Experience with cloud, SaaS, and microservices.
• Familiarity with MITRE, OWASP frameworks.
• 2+ years in risk assessments, pentesting, code reviews, SSDLC.

Responsabilidades

• Obtain mandate to launch products with appropriate security controls.
• Monitor security systems and prioritize remediation.
• Provide security standards and guidelines.
• Integrate security features across SDLC.
• Support Pre-Sales security questionnaires.
• Review architecture and designs for new products.
• Identify and remediate security exposures including testing.
• Research new security tools and technologies.
• Collaborate with R&D and Product on security.
• Perform periodic app-level penetration tests.
• Coordinate third-party security assessments.
• Train teams on Secure-SDLC and secure design.
• Provide guidance on AppSec practices.

Conocimientos

AppSec

Cloud Security

Secure coding

MITRE/OWASP

Threat modeling

Herramientas

Cloud platforms

SaaS environments

Microservices

Penetration testing tools

Code review tools

Descripción del empleo

Who We Are Is What We Do.

Deel is the all-in-one payroll and HR platform for global teams. Our vision is to unlock global opportunity for every person, team, and business. Built for the way the world works today, Deel combines HRIS, payroll, compliance, benefits, performance, and equipment management into one seamless platform. With AI-powered tools and a fully owned payroll infrastructure, Deel supports every worker type in 150+ countries-helping businesses scale smarter, faster, and more compliantly.

Who We Are Is What We Do.

Deel is the all-in-one payroll and HR platform for global teams. Our vision is to unlock global opportunity for every person, team, and business. Built for the way the world works today, Deel combines HRIS, payroll, compliance, benefits, performance, and equipment management into one seamless platform. With AI-powered tools and a fully owned payroll infrastructure, Deel supports every worker type in 150+ countries-helping businesses scale smarter, faster, and more compliantly.

Among the largest globally distributed companies in the world, our team of 7,000 spans more than 100 countries, speaks 74 languages, and brings a connected and dynamic culture that drives continuous learning and innovation for our customers.

Why should you be part of our success story?

As the fastest-growing Software as a Service (SaaS) company in history, Deel is transforming how global talent connects with world-class companies - breaking down borders that have traditionally limited both hiring and career opportunities. We're not just building software; we're creating the infrastructure for the future of work, enabling a more diverse and inclusive global economy. In 2024 alone, we paid $11.2 billion to workers in nearly 100 currencies and provided healthcare and benefits to workers in 109 countries-ensuring people get paid and protected, no matter where they are.

Our momentum is reflected in our achievements and customer satisfaction: CNBC Disruptor 50, Forbes Cloud 100, Deloitte Fast 500, and repeated recognition on Y Combinator's top companies list - all while maintaining a 4.83 average rating from 15,000 reviews across G2, Trustpilot, Captera, Apple and Google.

Your experience at Deel will be a career accelerator. At the forefront of the global work revolution, you'll tackle complex challenges that impact millions of people's working lives. With our momentum-backed by a $17.3 billion valuation and $1 B in Annual Recurring Revenue (ARR) in just over five years—you'll drive meaningful impact while building expertise that makes you a sought-after leader in the transformation of global work.

Summary

The Application Security Architect will lead the efforts to secure Deel’s product by guiding and monitoring the different R&D teams to secure development, designing secure architecture of software products, conducting risk and threat analysis, threat modeling, code reviews, application penetration testing, and responding to specific developers’ and/or customers’ questions.

Responsibilities

• Work to obtain the right mandate to ensure Deel’s products or services are launched with the appropriate security controls
• Continually monitor the security systems and prioritize the remediation for the product, R&D, and/or DevOps
• Provide security standards, requirements, and guidelines for securing the products.
• Take a part in the development lifecycle and integration of security features into all phases of software design and development
• Provide support for Pre-Sales activities and potential customers' security questionnaires.
• Assist with reviewing architecture and design for new products, features, and services
• Identify and facilitate remediation of application and cloud security exposures and vulnerabilities, including code reviews, threat modeling, and penetration testing if needed
• Research new application security tools and technologies, and evaluate options that enhance security capabilities
• Work closely with R&D and Product to enhance application security on all layers
• Perform periodic application level penetration tests on major features and versions
• Coordinate third-party penetration tests and security assessments as part of our global security program
• Working collaboratively with development teams on secure design and Threat modeling, performing training on Secure-SDLC and secure development
• Providing guidance and answering questions about security practices in regard to AppSec

Qualifications

• 3+ years of experience in Application Security / Cloud Security within R&D
• Experience with secure coding techniques
• Experience in Cloud technologies, SaaS environments, and microservices architecture
• Deep understanding of cyber security frameworks, such as MITRE, OWASP, and others
• Stay up to date with the latest security technologies, and attack techniques
• Deep knowledge in web & application security
• 2+ years of experience in application risk assessments, penetration testing, code review, and SSDLC procedures

Total Rewards

Our workforce deserves fair and competitive pay that meets them where they are. With scalable benefits, rewards, and perks, our total rewards programs reflect our commitment to inclusivity and access for all.

• Our salary range reflects gross base salary. For commercial roles with commission eligibility, this figure represents On-Target Earnings (OTE), inclusive of base salary and target commission.
• Salary ranges are quoted in USD as a consistent global reference. Your offer will be localized to your country's currency using a market-aligned conversion.
• Final pay is based on objective, job-related criteria including experience, skills, and location.
• We don't ask about salary history. Offers are based on the role and what you bring to it.

Some things you'll enjoy

• Stock grant opportunities dependent on your role, employment status and location
• Additional perks and benefits based on your employment status and country
• Optional flexible working office membership, with IWG

At Deel, we're an equal-opportunity employer that values diversity and positively encourage applications from suitably qualified and eligible candidates regardless of race, religion, sex, national origin, gender, sexual orientation, age, marital status, veteran status, disability status, pregnancy or maternity or other applicable legally protected characteristics.

Unless otherwise agreed, we will communicate with job applicants using Deel-specific emails, which include @deel.com and other acquired company emails like @payspace.com and @paygroup.com. You can view the most up-to-date job listings at Deel by visiting our careers page.

Deel welcomes persons with disabilities to apply to any of our open roles. We will provide application and/or interview accommodations on request throughout the recruitment, selection and assessment process for applicants with disabilities or other needs. If you require application and/or interview accommodations, please inform our Talent Acquisition Team via email ([e-mail]) and a team member will be in touch to ensure your equal participation.

As part of our hiring process, we primarily rely on interviews and role-related assessments. In limited cases, we may also consider informal background information relevant to the role, in line with our privacy and fairness obligations.

This application process may utilise Automated Employment Decision Tools (AEDT) and AI systems to assist in evaluating candidates based on experience level, technical skills and qualifications. This processing is conducted in compliance with applicable Data Protection, AI Governance and Labour Laws. We ensure human oversight is maintained in all final hiring decisions. Your personal data is not used to train AI models. For more information on how we process your personal data, please see our Recruitment Privacy Policy.

• For NYC Residents: In accordance with NYC Local Law 144, an independent bias audit has been conducted on AEDT