AWS & Platform Security Architect

Deel; Italia; Ibrido; EUR 110.000 - 160.000; Tempo pieno

Vantaggi offerti da questo lavoro

Stock grants

Flexible office membership (IWG)

Office membership with IWG

Descrizione del lavoro

Deel is seeking a Platform Security Architect to own the security of our platform across applications and cloud infrastructure (AWS). You will design, build, and evolve security architecture, working with Engineering, Infrastructure, Product, and Privacy/Compliance to keep security by default.

The role demands hands-on expertise across cloud and application security, container security, and secure development lifecycle practices.

Competenze

• 5+ years in cybersecurity with cloud and application security depth.
• Strong AWS security expertise: IAM, network controls, logging, data protection.
• Experience integrating security gates into CI/CD for app code and IaC.
• Hands-on threat modeling and risk-based engineering guidance.
• Secure coding enablement and security champions program development.

Mansioni

• Define secure design patterns for applications, services, and cloud.
• Operate security tooling across cloud posture and SAST/DAST scanning.
• Design IAM and multi-tenant access controls for cloud and apps.
• Embed security into SDLC and CI/CD pipelines with guardrails.
• Secure containers, Kubernetes, image hardening, and runtime security.
• Lead platform security incident response and vulnerability management.
• Ensure SOC 2 Type II, ISO 27001, PCI DSS, and GDPR compliance.

Conoscenze

Cloud security

Application security

AWS security

CI/CD security

Security champions

Code reading

Containers & Kubernetes

Strumenti

Wiz

Aikido

Snyk

Semgrep

HashiCorp Vault

Descrizione del lavoro

Deel is seeking a Platform Security Architect to own the security of our platform across applications and cloud infrastructure (AWS). You will design, build, and evolve security architecture, working with Engineering, Infrastructure, Product, and Privacy/Compliance to keep security by default.

The role demands hands-on expertise across cloud and application security, container security, and secure development lifecycle practices.