Platform Security Architect: AWS & Cloud Security Lead

Deel; Roma; On-site; EUR 120,000 - 160,000; Full time

Benefits offered by this job

Stock grant opportunities

Flexible working office membership

Country-based perks

Inclusive employer

Job summary

Deel is seeking a Platform Security Lead to shape Deel's security posture across applications, services, and cloud environments with a focus on AWS. You’ll define secure patterns, run an integrated security tooling program, and embed guardrails into SDLC and CI/CD.

You’ll own identity and access controls, container and Kubernetes security, and software supply chain defense, while partnering with Compliance to meet standards.

Qualifications

• 3+ years in cybersecurity with cloud and application security depth.
• Deep AWS security expertise: IAM, network controls, logging/monitoring, data protection.
• Deep application security knowledge: OWASP Top 10, API security, auth design, injection, SSRF, secure sessions.
• Hands-on with Wiz, Orca/Prisma Cloud and Aikido or Snyk/Semgrep/GitHub Advanced Security.
• CI/CD security gates for code and IaC.
• Container and Kubernetes security: image hardening, runtime security, pod security, RBAC.
• Threat modeling experience (STRIDE, attack trees).
• Ability to read/write production code in TypeScript/Node.js, Python, Go, or Java.
• Secrets management and encryption patterns.
• Vulnerability management or bug bounty/pentest experience.
• Knowledge of SOC 2 II, ISO 27001, PCI DSS, and GDPR.
• Ability to translate security concepts to engineers and executives.
• Excellent English, written and verbal.

Responsibilities

• Own platform security architecture strategy across applications, services, and cloud (AWS) with default secure patterns.
• Operate security tooling program (Wiz, Aikido) and ensure findings translate into actionable fixes.
• Design and own IAM and application authentication/authorization, including multi-tenant isolation.
• Embed security into SDLC and CI/CD with guardrails for code and IaC.
• Secure containers and Kubernetes including image hardening, runtime protection, and network policies.
• Own software supply chain security from dependencies to artifact provenance.
• Lead threat modeling and integrate it into engineering design processes.
• Manage vulnerability management and coordinate remediation with engineering teams.
• Lead security incident response across application and cloud layers.
• Partner with Privacy/Compliance to satisfy SOC 2 II, ISO 27001, PCI DSS, and GDPR.
• Scale security through a Security Champions program and secure coding enablement.
• Act as technical authority on platform security and influence cloud strategy at leadership level.
• Leverage AI to improve security posture and secure AI features.

Skills

Platform security leadership

AWS security

IAM design

Container security

Kubernetes security

Threat modeling

Vulnerability management

CI/CD security gates

Security tooling

SAST/DAST/SCA tools

Security governance

Cloud security monitoring

English communication

Tools

Wiz

Orca

Prisma Cloud

Aikido

Snyk

Semgrep

GitHub Advanced Security

Terraform

Job description

Deel is seeking a Platform Security Lead to shape Deel's security posture across applications, services, and cloud environments with a focus on AWS. You’ll define secure patterns, run an integrated security tooling program, and embed guardrails into SDLC and CI/CD.

You’ll own identity and access controls, container and Kubernetes security, and software supply chain defense, while partnering with Compliance to meet standards.