Platform Security Architect — AWS & Cloud Security Leader

Deel; Chieti; Hybrid; EUR 90,000 - 180,000; Full time

Benefits offered by this job

Stock grants

Flexible office membership

Country-based perks

Diversity & inclusion

Job summary

Deel is seeking a Platform Security Lead to shape security posture across applications, services, and cloud (AWS). You will own IAM, application authentication, and container security, embedding guardrails into SDLC/CI/CD and guiding security design at the leadership level.

Lead vulnerability management, threat modeling, and integration with compliance to meet SOC 2 II, ISO 27001, PCI DSS, and GDPR while enabling AI-driven security improvements.

Qualifications

• 3+ years in cybersecurity with cloud security and application security depth.
• Deep AWS security expertise: IAM, network controls, logging/monitoring, data protection.
• Deep application security knowledge: OWASP Top 10, API security, auth design, injection, SSRF, secure sessions.
• CI/CD gates for code and IaC.
• Container and Kubernetes security: image hardening, runtime security, pod security, RBAC.
• Threat modeling experience (STRIDE, attack trees).
• Ability to read and write production code in TypeScript/Node.js, Python, Go, or Java.
• Secrets management and encryption patterns.
• Vulnerability management or bug bounty/pentest experience.
• Knowledge of SOC 2 II, ISO 27001, PCI DSS, GDPR.

Responsibilities

• Own platform security architecture strategy across applications, services, and cloud (AWS) with default secure patterns.
• Operate security tooling program (Wiz, Aikido) and translate findings into fixes.
• Design and own IAM and application authentication/authorization, including multi-tenant isolation.
• Embed security into SDLC and CI/CD with guardrails for code and IaC.
• Secure containers and Kubernetes including image hardening, runtime protection, and network policies.
• Own software supply chain security from dependencies to artifact provenance.
• Lead threat modeling and integrate into engineering design processes.
• Lead security incident response across application and cloud layers.
• Partner with Privacy/Compliance to satisfy SOC 2 II, ISO 27001, PCI DSS, GDPR.

Skills

AWS security

IAM design

Kubernetes security

Threat modeling

Vulnerability management

CI/CD security

SAST/DAST/SCA tools

Cloud security monitoring

Reading production code

Tools

Wiz

Orca/Prisma Cloud

Aikido

Snyk

Semgrep

GitHub Advanced Security

Job description

Deel is seeking a Platform Security Lead to shape security posture across applications, services, and cloud (AWS). You will own IAM, application authentication, and container security, embedding guardrails into SDLC/CI/CD and guiding security design at the leadership level.

Lead vulnerability management, threat modeling, and integration with compliance to meet SOC 2 II, ISO 27001, PCI DSS, and GDPR while enabling AI-driven security improvements.