Platform Security Architect

Deel; Genova; On-site; EUR 120,000 - 180,000; Full time

Benefits offered by this job

Stock grant opportunities

Flexible office membership

Country-based perks

Inclusive, equal-opportunity employer

Job summary

Deel è alla ricerca di un Platform Security Lead per guidare la postura di sicurezza across applicazioni, servizi e ambienti cloud (AWS). Sarai responsabile di architettura, tooling, IAM e sicurezza del container, con attenzione alla supply chain e al rispetto di SOC 2 II, ISO 27001, PCI DSS e GDPR.

La posizione richiede leadership, capacità di tradurre concetti complessi in linee guida operative e una forte collaborazione con Compliance e team ingegneristici.

Qualifications

• 3+ anni di esperienza in cybersecurity con sicurezza cloud e applicativa.
• Esperienza approfondita in AWS IAM, controlli di rete, logging e protezione dati.
• Conoscenza di OWASP Top 10, API security, design di autenticazione/Autorizzazione.
• Esperienza con i tool Wiz, Orca/Prisma Cloud e Aikido o Snyk/Semgrep/GitHub Advanced Security.
• Gates di sicurezza CI/CD per codice e IaC.
• Sicurezza di container e Kubernetes: hardening, runtime, RBAC.
• Threat modeling (STRIDE, attack trees).
• Capacità di leggere/scrivere codice in TypeScript/Node.js, Python, Go o Java.
• Gestione Secrets (Vault, AWS Secrets Manager) e cifratura.
• Gestione vulnerabilità o programma bug bounty/pentest.
• Conoscenza SOC 2 II, ISO 27001, PCI DSS e GDPR.
• Capacità di tradurre concetti di sicurezza in linee guida per ingegneri/executives.
• Ottime capacità comunicative in inglese.

Responsibilities

• Progettare e guidare la strategia di sicurezza della piattaforma su applicazioni, servizi e cloud (AWS).
• Gestire tooling di sicurezza (Wiz, Aikido) e tradurre le findings in fixes concreti.
• Progettare IAM e autenticazione/autorizzazione delle applicazioni, inclusa multi-tenant isolation.
• Integrare la sicurezza nel SDLC e CI/CD con guardrails per codice e IaC.
• Sicurezza di container e Kubernetes: image hardening, runtime, policy.
• Gestire la sicurezza della supply chain del software, dalle dipendenze all’origine degli artefatti.
• Guidare threat modeling e integrarlo nei processi di progettazione engineering.
• Gestire vulnerability management e coordinare remediation con i team.
• Guidare incident response di sicurezza su livelli applicativi e cloud.
• Collaborare con Privacy/Compliance per SOC 2 II, ISO 27001, PCI DSS e GDPR.
• Far crescere la sicurezza tramite Security Champions e formazione su secure coding.
• Agire da autorità tecnica su sicurezza della piattaforma e influenzare la strategia cloud a livello dirigenziale.
• Utilizzare l’AI per migliorare la postura di sicurezza e le funzionalità sicure dell’AI.

Skills

Cybersecurity leadership

AWS security

Application security

CI/CD security

Container security

Kubernetes security

Threat modeling

Programming ability

Secrets management

Vulnerability management

Security standards

English communication

Comunicazione chiara

Tools

Wiz

Orca/Prisma Cloud

Aikido

Snyk

Semgrep

GitHub Advanced Security

Job description

Overview

As the platform security lead, you will shape Deel's security posture across applications, services, and cloud environments with a focus on AWS. You’ll define secure patterns, run an integrated security tooling program, and embed guardrails into SDLC and CI/CD. You’ll own identity and access controls, container and Kubernetes security, and software supply chain defense, while partnering with Compliance to meet standards. You’ll operate at leadership level to drive secure design, risk reduction, and continuous improvement using AI. This role offers a high-impact opportunity to secure a global, fast-growing fintech/HR platform.

Retribuzione / Benefits

• Stock grant opportunities
• Optional flexible working office membership
• Additional perks based on country and status
• Inclusive, equal-opportunity employer

Responsabilità

• Own platform security architecture strategy across applications, services, and cloud (AWS) with default secure patterns.
• Operate security tooling program (Wiz, Aikido) and ensure findings translate into actionable fixes.
• Design and own IAM and application authentication/authorization, including multi-tenant isolation.
• Embed security into SDLC and CI/CD with guardrails for code and IaC.
• Secure containers and Kubernetes including image hardening, runtime protection, and network policies.
• Own software supply chain security from dependencies to artifact provenance.
• Lead threat modeling and integrate it into engineering design processes.
• Manage vulnerability management and coordinate remediation with engineering teams.
• Lead security incident response across application and cloud layers.
• Partner with Privacy/Compliance to satisfy SOC 2 II, ISO 27001, PCI DSS, and GDPR.
• Scale security through a Security Champions program and secure coding enablement.
• Act as technical authority on platform security and influence cloud strategy at leadership level.
• Leverage AI to improve security posture and secure AI features.

Requisiti fondamentali

• 3+ years in cybersecurity with cloud security and application security depth.
• Deep AWS security expertise: IAM, network controls, logging/monitoring, data protection.
• Deep application security knowledge: OWASP Top 10, API security, auth design, injection, SSRF, secure sessions.
• Hands-on experience with Wiz or Orca/Prisma Cloud and Aikido or Snyk/Semgrep/GitHub Advanced Security.
• CI/CD security gates for code and IaC.
• Container and Kubernetes security: image hardening, runtime security, pod security, RBAC.
• Threat modeling experience (STRIDE, attack trees).
• Ability to read and write production code in at least one language (TypeScript/Node.js, Python, Go, or Java).
• Secrets management (HashiCorp Vault, AWS Secrets Manager) and encryption patterns.
• Vulnerability management or bug bounty/pentest program experience.
• Knowledge of SOC 2 II, ISO 27001, PCI DSS, and GDPR.
• Ability to translate complex security concepts into guidance for engineers and executives.
• Excellent English, written and verbal.

• clear communication
• cross-functional collaboration
• risk-based decision making
• AWS IAM design and cloud controls
• Cloud security monitoring (CloudTrail, Security Hub, GuardDuty)
• SAST/DAST/SCA tools (Aikido, Snyk, Semgrep, GitHub Advanced Security)