Platform Security Architect - AWS Security Leader

Deel; Puglia; On-site; EUR 120,000 - 180,000; Full time

Benefits offered by this job

Stock grant opportunities

Optional flexible working office memb

Additional perks based on country and

Inclusive, equal-opportunity employer

Job summary

Deel is seeking a Platform Security Lead to shape security posture across applications, services and cloud environments with a focus on AWS. You will define secure patterns, run an integrated tooling program, and embed guardrails into SDLC and CI/CD.

You will own IAM and application authentication, secure containers and Kubernetes, and lead software supply chain security while partnering with Compliance to meet SOC 2 II, ISO 27001, PCI DSS and GDPR.

Qualifications

• 3+ years in cybersecurity with cloud security and application security depth.
• Deep AWS security expertise: IAM, network controls, logging/monitoring, data protection.
• Deep application security knowledge: OWASP Top 10, API security, auth design, injection, SSRF, secure sessions.
• Hands-on experience with Wiz or Orca/Prisma Cloud and Aikido or Snyk/Semgrep/GitHub Advanced Security.
• CI/CD security gates for code and IaC.
• Container and Kubernetes security: image hardening, runtime security, pod security, RBAC.
• Threat modeling experience (STRIDE, attack trees).
• Ability to read and write production code in at least one language (TypeScript/Node.js, Python, Go, or Java).
• Secrets management and encryption patterns.
• Vulnerability management or bug bounty/pentest program experience.
• Knowledge of SOC 2 II, ISO 27001, PCI DSS, and GDPR.
• Ability to translate complex security concepts into guidance for engineers and executives.
• Excellent English, written and verbal.

Responsibilities

• Own platform security architecture strategy across applications, services, and cloud (AWS) with default secure patterns.
• Operate security tooling program and ensure findings translate into actionable fixes.
• Design and own IAM and application authentication/authorization, including multi-tenant isolation.
• Embed security into SDLC and CI/CD with guardrails for code and IaC.
• Secure containers and Kubernetes including image hardening, runtime protection, and network policies.
• Own software supply chain security from dependencies to artifact provenance.
• Lead threat modeling and integrate it into engineering design processes.
• Manage vulnerability management and coordinate remediation with engineering teams.
• Lead security incident response across application and cloud layers.
• Partner with Privacy/Compliance to satisfy SOC 2 II, ISO 27001, PCI DSS, and GDPR.
• Scale security through a Security Champions program and secure coding enablement.
• Act as technical authority on platform security and influence cloud strategy at leadership level.
• Leverage AI to improve security posture and secure AI features.

Skills

clear communication

cross-functional collaboration

risk-based decision making

excellent English

Tools

Wiz

Orca

Prisma Cloud

Aikido

Snyk

Semgrep

GitHub Advanced Security

Cloud security monitoring

Job description

Deel is seeking a Platform Security Lead to shape security posture across applications, services and cloud environments with a focus on AWS. You will define secure patterns, run an integrated tooling program, and embed guardrails into SDLC and CI/CD.

You will own IAM and application authentication, secure containers and Kubernetes, and lead software supply chain security while partnering with Compliance to meet SOC 2 II, ISO 27001, PCI DSS and GDPR.