AppSec Architect: Secure SaaS & Cloud

Deel; Colombia; Presencial; COP 280.260.000 - 404.820.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Stock grants

Flexible office membership

Descripción de la vacante

Deel is the all-in-one payroll and HR platform for global teams. The Application Security Architect will lead security across Deel’s product, guiding R&D teams to design secure software, perform threat modeling, code reviews, and penetration testing, and respond to security questions from developers and customers.

You will coordinate third-party assessments, stay current with MITRE/OWASP frameworks, and partner with product and DevOps to embed security into every stage of development, while

Formación

• 3+ years in Application Security or Cloud Security within R&D.
• Experience with secure coding techniques.
• Experience with cloud, SaaS, and microservices.
• Familiarity with MITRE, OWASP frameworks.
• 2+ years in risk assessments, pentesting, code reviews, SSDLC.

Responsabilidades

• Obtain mandate to launch products with appropriate security controls.
• Monitor security systems and prioritize remediation.
• Provide security standards and guidelines.
• Integrate security features across SDLC.
• Support Pre-Sales security questionnaires.
• Review architecture and designs for new products.
• Identify and remediate security exposures including testing.
• Research new security tools and technologies.
• Collaborate with R&D and Product on security.
• Perform periodic app-level penetration tests.
• Coordinate third-party security assessments.
• Train teams on Secure-SDLC and secure design.
• Provide guidance on AppSec practices.

Conocimientos

AppSec

Cloud Security

Secure coding

MITRE/OWASP

Threat modeling

Herramientas

Cloud platforms

SaaS environments

Microservices

Penetration testing tools

Code review tools

Descripción del empleo

Deel is the all-in-one payroll and HR platform for global teams. The Application Security Architect will lead security across Deel’s product, guiding R&D teams to design secure software, perform threat modeling, code reviews, and penetration testing, and respond to security questions from developers and customers.

You will coordinate third-party assessments, stay current with MITRE/OWASP frameworks, and partner with product and DevOps to embed security into every stage of development, while