Technical Lead, IT Security

Deel

United Kingdom

Remote

GBP 82,000 - 120,000

Full time

30 hours ago

Be an early applicant

A complete application in a minute

Tailored resume and cover letter, ready to send.

Get past ATS filters

Benefits offered by this job

Stock grant opportunities

Flexible office membership

Job summary

Deel is hiring a Technical Lead for Security Engineers with an AI-first mindset in a remote-first, global environment. You will own the security platform lifecycle, translate compliance needs into technical controls, and mentor engineers while shaping the security roadmap.

You will lead architectural efforts across EDR, SWG, CASB, ZTNA, SSPM and DLP, partnering with stakeholders to protect data and enable secure global work.

Qualifications

7+ years of cybersecurity experience, with 2+ years in a leadership or architecture role.
Hands-on with core security tools: EDR, SWG, CASB, ZTNA, SSPM and DLP.
Excellent English communication, able to explain security to non-technical audiences.
Experience deploying enterprise security solutions with cross-functional stakeholders.

Responsibilities

Act as SME/Technical Owner for EDR, defining architecture and policies for endpoints and cloud assets.
Lead design and policy tuning for SWG, CASB and ZTNA with relevant tooling.
Define strategy for SSPM and continuous SaaS security posture improvements.
Drive DLP implementation across endpoints, networks, SaaS and cloud assets.
Lead Enterprise Browser deployment and secure web access controls.
Own endpoint vulnerability and patch management program.
Collaborate with stakeholders to design security solutions aligned to business processes.
Mentor engineers and develop a 1-3 year security roadmap.

Skills

AI first mindset

Cybersecurity leadership

Security architecture

Scripting/automation

Education

CISSP/CISM certifications

Tools

EDR

SWG

CASB

ZTNA

SSPM

DLP

Job description

Who We Are Is What We Do.

Deel is the all-in-one payroll and HR platform for global teams. Our vision is to unlock global opportunity for every person, team, and business. Built for the way the world works today, Deel combines HRIS, payroll, compliance, benefits, performance, and equipment management into one seamless platform. With AI-powered tools and a fully owned payroll infrastructure, Deel supports every worker type in 150+ countries—helping businesses scale smarter, faster, and more compliantly.

Who We Are Is What We Do.

Why should you be part of our success story?

As the fastest-growing Software as a Service (SaaS) company in history, Deel is transforming how global talent connects with world-class companies – breaking down borders that have traditionally limited both hiring and career opportunities. We're not just building software; we're creating the infrastructure for the future of work, enabling a more diverse and inclusive global economy. In 2024 alone, we paid $11.2 billion to workers in nearly 100 currencies and provided healthcare and benefits to workers in 109 countries—ensuring people get paid and protected, no matter where they are.

Our momentum is reflected in our achievements and customer satisfaction: CNBC Disruptor 50, Forbes Cloud 100, Deloitte Fast 500, and repeated recognition on Y Combinator's top companies list – all while maintaining a 4.83 average rating from 15,000 reviews across G2, Trustpilot, Captera, Apple and Google.

Your experience at Deel will be a career accelerator. At the forefront of the global work revolution, you'll tackle complex challenges that impact millions of people's working lives. With our momentum—backed by a $17.3 billion valuation and $1 B in Annual Recurring Revenue (ARR) in just over five years—you'll drive meaningful impact while building expertise that makes you a sought-after leader in the transformation of global work.

We are seeking a Technical Lead for Security Engineers with AI first mindset,

to serve as a principal technical leader in designing, implementing, and optimizing our core security platforms. This pivotal role will define the technical roadmap for advancing our defense-in-depth capabilities, ensuring robust adherence to global regulatory frameworks, and protecting sensitive data within our remote-first, global environment. The ideal candidate will own the strategic vision and entire lifecycle of multiple security solutions, translating best practices and compliance requirements into comprehensive, actionable technical controls, and mentoring senior and junior engineers.

Responsibilities

Act as the Subject Matter Expert (SME) and Technical Owner for Endpoint Detection and Response (EDR) tools/processes, including defining the architecture, optimizing configurations/policies, developing custom threat detection rules, and proactively improving the company’s overall security posture for remote endpoints (Mac and Windows) and cloud assets. Hands-on experience with tools like CrowdStrike (Preferred), Microsoft Defender etc are key requirements.
Lead the design, configuration, and the continual policy tuning for SWG (Secure Web Gateway), CASB, and ZTNA (Zero Trust Network Access). Hands-on experience with tools like Netskope, ZScaler, Palo Alto or similar are critical for this role.
Define and execute the strategy for continuously improving SaaS security posture using SSPM (SaaS Security Posture Management) tools and associated processes.
Drive the implementation of DLP (Data Loss Prevention) across Endpoint, Network, SaaS Applications, and Cloud assets, leading the technical direction for the “Crawl-Walk-Run” program phases.
Lead and implement Enterprise Browsers (Island, Chrome Enterprise or similar), including controlling access to sensitive web apps, DLP configuration, ZTNA. Ensure a secure web browsing experience from both endpoints and mobile phones.
Own vulnerability and patch management program for endpoints.
Lead the technical collaboration with diverse internal stakeholders to design security solutions aligned to business processes.
Mentor and provide technical guidance to other engineers on the team, elevating their capabilities across the security platforms.
Develop and maintain the 1-3 year technical roadmap for endpoint, network, and SaaS security controls, aligning with business objectives and threat landscape evolution.

Job Requirements

AI first mindset!
7+ years of experience in cybersecurity, with a minimum of 2 years in a technical leadership or architectural capacity.
Deep, hands-on architectural experience with core security tools: EDR, SWG, CASB, ZTNA, SSPM, and DLP.
Expert-level familiarity with cybersecurity frameworks: MITRE ATT&CK, NIST, CIS, ISO27001, SOC, with demonstrated ability to implement controls.
Scripting/automation experience (e.g., Bash, Python, PowerShell) to drive platform efficiency.
Extensive experience leading the technical rollout and adoption of enterprise security solutions with internal stakeholders.
Familiarity with AI solutions such as Claude, Gemini and comfortable using MCP solutions.
Excellent English in both verbal and written communication, with the ability to articulate complex security concepts to technical and non-technical audiences.

Advantages

CISSP, CISM are good to have. AWS/GCP cloud engineer certification is a plus.

Bonus

Experience in utilizing SIEM (Security Information and Event Management) for threat hunting, correlation, and complex telemetry querying.

Total Rewards

Our workforce deserves fair and competitive pay that meets them where they are. With scalable benefits, rewards, and perks, our total rewards programs reflect our commitment to inclusivity and access for all.

Our salary range reflects gross base salary. For commercial roles with commission eligibility, this figure represents On-Target Earnings (OTE), inclusive of base salary and target commission.
Salary ranges are quoted in USD as a consistent global reference. Your offer will be localized to your country's currency using a market-aligned conversion.
Final pay is based on objective, job-related criteria including experience, skills, and location.
We don't ask about salary history. Offers are based on the role and what you bring to it.

Some things you'll enjoy

Stock grant opportunities dependent on your role, employment status and location
Additional perks and benefits based on your employment status and country
Optional flexible working office membership, with IWG

At Deel, we're an equal-opportunity employer that values diversity and positively encourage applications from suitably qualified and eligible candidates regardless of race, religion, sex, national origin, gender, sexual orientation, age, marital status, veteran status, disability status, pregnancy or maternity or other applicable legally protected characteristics.

Unless otherwise agreed, we will communicate with job applicants using Deel-specific emails, which include @deel.com and other acquired company emails like @payspace.com and @paygroup.com. You can view the most up-to-date job listings at Deel by visiting our careers page.

Deel welcomes persons with disabilities to apply to any of our open roles. We will provide application and/or interview accommodations on request throughout the recruitment, selection and assessment process for applicants with disabilities or other needs. If you require application and/or interview accommodations, please inform our Talent Acquisition Team via email (recruiting@deel.com) and a team member will be in touch to ensure your equal participation.

As part of our hiring process, we primarily rely on interviews and role-related assessments. In limited cases, we may also consider informal background information relevant to the role, in line with our privacy and fairness obligations.

This application process may utilise Automated Employment Decision Tools (AEDT) and AI systems to assist in evaluating candidates based on experience level, technical skills and qualifications. This processing is conducted in compliance with applicable Data Protection, AI Governance and Labour Laws. We ensure human oversight is maintained in all final hiring decisions. Your personal data is not used to train AI models. For more information on how we process your personal data, please see our Recruitment Privacy Policy.