Platform Security Architect: Cloud + AI Security Lead

Deel; Verona; On-site; EUR 110,000 - 170,000; Full time

Benefits offered by this job

Stock grant opportunities

Optional flexible working office memb?

Additional perks based on country and

Job summary

Deel is seeking a Platform Security Lead to shape security posture across applications, services and cloud (AWS). You will own IAM, container and Kubernetes security, and software supply chain defense, while partnering with Compliance to meet SOC 2 II, ISO 27001, PCI DSS, and GDPR.

You will drive secure design in SDLC/CI/CD, embed guardrails, scale security via a Champions program, and lead incident response across cloud and apps.

Qualifications

• 3+ years in cybersecurity with cloud and application security depth.
• Deep AWS security expertise including IAM, network controls, logging, and data protection.
• Deep application security knowledge: OWASP Top 10, API security, auth design, injection, SSRF, secure sessions.
• Hands-on with Wiz, Orca/Prisma Cloud, and Aikido or Snyk/Semgrep/GitHub Advanced Security.
• CI/CD security gates for code and IaC.
• Container and Kubernetes security: image hardening, runtime security, pod security, RBAC.
• Threat modeling experience (STRIDE, attack trees).
• Ability to read and write production code in TypeScript/Node.js, Python, Go, or Java.
• Secrets management (HashiCorp Vault, AWS Secrets Manager) and encryption patterns.
• Vulnerability management or bug bounty/pentest program experience.
• Knowledge of SOC 2 II, ISO 27001, PCI DSS, and GDPR.
• Ability to translate complex security concepts into guidance for engineers and executives.
• Excellent English, written and verbal.

Responsibilities

• Own platform security architecture strategy across applications, services, and cloud (AWS) with default secure patterns.
• Operate security tooling program and ensure findings translate into actionable fixes.
• Design and own IAM and application authentication/authorization, including multi-tenant isolation.
• Embed security into SDLC and CI/CD with guardrails for code and IaC.
• Secure containers and Kubernetes including image hardening, runtime protection, and network policies.
• Own software supply chain security from dependencies to artifact provenance.
• Lead threat modeling and integrate it into engineering design processes.
• Manage vulnerability management and coordinate remediation with engineering teams.
• Lead security incident response across application and cloud layers.
• Partner with Privacy/Compliance to satisfy SOC 2 II, ISO 27001, PCI DSS, and GDPR.
• Scale security through a Security Champions program and secure coding enablement.
• Act as technical authority on platform security and influence cloud strategy at leadership level.
• Leverage AI to improve security posture and secure AI features.

Skills

3+ years cybersecurity experience

Deep AWS security expertise

Deep application security knowledge

Hands-on with security tools (Wiz)

Snyk/Semgrep/GitHub Advanced Security

CI/CD security gates

Container and Kubernetes security

Threat modeling experience

Read/write production code (TS/Node.js

Secrets management

Vulnerability management experience

SOC 2 II / ISO 27001 / PCI DSS / GDPR

Translate security concepts to execs/\

Excellent English

Tools

Wiz

Orca/Prisma Cloud

Aikido

Snyk

Semgrep

GitHub Advanced Security

HashiCorp Vault

AWS Secrets Manager

CloudTrail

Security Hub

GuardDuty

Job description

Deel is seeking a Platform Security Lead to shape security posture across applications, services and cloud (AWS). You will own IAM, container and Kubernetes security, and software supply chain defense, while partnering with Compliance to meet SOC 2 II, ISO 27001, PCI DSS, and GDPR.

You will drive secure design in SDLC/CI/CD, embed guardrails, scale security via a Champions program, and lead incident response across cloud and apps.