Cloud Security Architect: AWS, IAM & DevSecOps Lead

Deel; Cremona; Hybrid; EUR 120,000 - 160,000; Full time

Benefits offered by this job

Stock grant opportunities

Flexible office membership

Global perks

Inclusive, equal-opportunity employer

Job summary

Deel is seeking a Platform Security Lead to shape security posture across applications, services, and cloud environments with a focus on AWS. You will define secure patterns, run an integrated security tooling program, and embed guardrails into SDLC and CI/CD, owning IAM and application authentication/authorization with multi-tenant isolation.

You will lead threat modeling, vulnerability management, and incident response while partnering with Compliance to meet SOC 2 II, ISO 27001, PCI DSS, and

Qualifications

• 3+ years in cybersecurity with cloud security and application security depth.
• Deep AWS security expertise: IAM, network controls, logging/monitoring, data protection.
• Deep application security knowledge: OWASP Top 10, API security, auth design, injection, SSRF, secure sessions.
• Hands-on experience with Wiz or Orca/Prisma Cloud and Aikido or Snyk/Semgrep/GitHub Advanced Security.
• CI/CD security gates for code and IaC.
• Container and Kubernetes security: image hardening, runtime security, pod security, RBAC.
• Threat modeling experience (STRIDE, attack trees).
• Ability to read and write production code in at least one language (TypeScript/Node.js, Python, Go, or Java).
• Secrets management (HashiCorp Vault, AWS Secrets Manager) and encryption patterns.
• Vulnerability management or bug bounty/pentest program experience.
• Knowledge of SOC 2 II, ISO 27001, PCI DSS, and GDPR.
• Ability to translate complex security concepts into guidance for engineers and executives.
• Excellent English, written and verbal.

Responsibilities

• Own platform security architecture strategy across applications, services, and cloud (AWS) with default secure patterns.
• Operate security tooling program (Wiz, Aikido) and ensure findings translate into actionable fixes.
• Design and own IAM and application authentication/authorization, including multi-tenant isolation.
• Embed security into SDLC and CI/CD with guardrails for code and IaC.
• Secure containers and Kubernetes including image hardening, runtime protection, and network policies.
• Own software supply chain security from dependencies to artifact provenance.
• Lead threat modeling and integrate it into engineering design processes.
• Manage vulnerability management and coordinate remediation with engineering teams.
• Lead security incident response across application and cloud layers.
• Partner with Privacy/Compliance to satisfy SOC 2 II, ISO 27001, PCI DSS, and GDPR.
• Scale security through a Security Champions program and secure coding enablement.
• Act as technical authority on platform security and influence cloud strategy at leadership level.
• Leverage AI to improve security posture and secure AI features.

Skills

AWS security

IAM design

Cloud & app security

Wiz/Aikido/Snyk

CI/CD security

Containers & Kubernetes

Threat modeling

Programming knowledge (TypeScript/Node

Secrets management

Vulnerability management

Tools

Wiz

Orca/Prisma Cloud

Aikido/Snyk/Semgrep/GitHub Advanced Security

Job description

Deel is seeking a Platform Security Lead to shape security posture across applications, services, and cloud environments with a focus on AWS. You will define secure patterns, run an integrated security tooling program, and embed guardrails into SDLC and CI/CD, owning IAM and application authentication/authorization with multi-tenant isolation.

You will lead threat modeling, vulnerability management, and incident response while partnering with Compliance to meet SOC 2 II, ISO 27001, PCI DSS, and