Information Security Engineer

Deel; Pakistan; Remote; PKR 24,931,000 - 36,011,000; Full time

Benefits offered by this job

Stock grant opportunities

Flexible working office membership

Job summary

Deel is hiring an Information Security Engineer to lead design, implementation, and optimization of core security platforms in a remote-first, global setting. You will own lifecycle of multiple security solutions, translate best practices and compliance into actionable controls for our distributed workforce.

The role requires 5+ years in cybersecurity, hands-on tools experience (EDR, SWG, CASB, ZTNA, SSPM, DLP), and cloud familiarity (AWS/GCP/Azure).

Qualifications

• 5+ years of experience in cybersecurity.
• Hands-on experience with security tools like EDR, SWG, CASB, ZTNA, SSPM and DLP.
• Experience managing technical vulnerability of OS and applications for endpoints.
• Familiarity with cybersecurity frameworks and best practices (MITRE, NIST, CIS, ISO27001, SOC).
• Experience collaborating with internal stakeholders to rollout enterprise security solutions.
• Cloud platforms such as AWS, GCP, Azure for hosting security tooling; SIEM experience a plus.
• Excellent English in both verbal and written.
• On-call schedule for weekends, activated for P1s.

Responsibilities

• Act as the SME for Endpoint Detection and Response (EDR) tools/process and optimize configurations, develop custom threat rules, and improve Deel’s security posture for remote endpoints and cloud assets.
• Configure, manage, and tune security policies within SWG, CASB and ZTNA; assist remote colleagues to troubleshoot end-user issues.
• Continuously improve SaaS security posture with SSPM tools and collaborate with application owners to resolve configuration drifts.
• Develop rigorous review, approval, policy enforcement and auditing for browser extensions and third-party OAuth apps to meet standards.
• Design, implement, and audit security policies for enterprise browsers (Island, Chrome Enterprise), including DLP, ZTNA, and secure web browsing.
• Implement and manage DLP policies across Endpoint, Network, SaaS applications and Cloud assets; support Crawl-Walk-Run Phases and comply with data sovereignty rules.
• Run vulnerability management programs for endpoints and servers; ensure patching per policy with stakeholders.

Skills

EDR tools

SWG

CASB

ZTNA

SSPM

DLP

Security posture

English fluency

Tools

CrowdStrike

InsightVM

Tenable

Qualys

Job description

Who We Are Is What We Do.

Deel is the all-in-one payroll and HR platform for global teams. Our vision is to unlock global opportunity for every person, team, and business. Built for the way the world works today, Deel combines HRIS, payroll, compliance, benefits, performance, and equipment management into one seamless platform. With AI-powered tools and a fully owned payroll infrastructure, Deel supports every worker type in 150+ countries—helping businesses scale smarter, faster, and more compliantly.

Who We Are Is What We Do.

Deel is the all-in-one payroll and HR platform for global teams. Our vision is to unlock global opportunity for every person, team, and business. Built for the way the world works today, Deel combines HRIS, payroll, compliance, benefits, performance, and equipment management into one seamless platform. With AI-powered tools and a fully owned payroll infrastructure, Deel supports every worker type in 150+ countries—helping businesses scale smarter, faster, and more compliantly. Among the largest globally distributed companies in the world, our team of 7,000 spans more than 100 countries, speaks 74 languages, and brings a connected and dynamic culture that drives continuous learning and innovation for our customers.

Why should you be part of our success story?

As the fastest-growing Software as a Service (SaaS) company in history, Deel is transforming how global talent connects with world-class companies – breaking down borders that have traditionally limited both hiring and career opportunities. We're not just building software; we're creating the infrastructure for the future of work, enabling a more diverse and inclusive global economy. In 2024 alone, we paid $11.2 billion to workers in nearly 100 currencies and provided healthcare and benefits to workers in 109 countries—ensuring people get paid and protected, no matter where they are.

Our momentum is reflected in our achievements and customer satisfaction: CNBC Disruptor 50, Forbes Cloud 100, Deloitte Fast 500, and repeated recognition on Y Combinator's top companies list – all while maintaining a 4.83 average rating from 15,000 reviews across G2, Trustpilot, Captera, Apple and Google.

Your experience at Deel will be a career accelerator. At the forefront of the global work revolution, you'll tackle complex challenges that impact millions of people's working lives. With our momentum—backed by a $17.3 billion valuation and $1 B in Annual Recurring Revenue (ARR) in just over five years—you'll drive meaningful impact while building expertise that makes you a sought-after leader in the transformation of global work.

We are seeking an Information Security Engineer to serve as a technical leader in designing, implementing, and optimizing our core security platforms. This role is crucial for advancing our defense-in-depth capabilities, ensuring adherence to global regulatory frameworks, and protecting sensitive data within our remote-first, global environment. The ideal candidate will own the entire lifecycle of multiple security solutions, translating best practices and compliance requirements into actionable technical controls.

Responsibilities

• Act as the Subject Matter Expert (SME) for Endpoint Detection and Response (EDR) tools/process including optimizing configurations/policies, developing custom threat detection rules, and proactively improving Deel’s overall security posture for remote endpoints (Mac and Windows) and cloud assets (Eg, VMs).


• Configure, manage, and tune the full suite of security policies within SWG, CASB and ZTNA. Assist our remote colleague with seamless experience through troubleshooting end user issues as needed.


• Continuously improve SaaS security posture with SSPM tools and processes around it. Collaborate with diverse application owners, understand security control and resolve configuration drifts for our wide range of SaaS applications from baseline.


• Develop a rigorous review, approval, policy enforcement and auditing for browser extensions, third party OAuth applications for SaaS applications such as Google Workspace, GitHub, Jira etc to meet security and privacy standards.


• Design, implement, and audit security policies related to enterprise browsers (Eg, Island, Chrome Enterprise etc) including controlling access to sensitive web apps, and data loss prevention (DLP) configuration, ZTNA, secure web browsing experience but not limited to.


• implement and manage DLP policies across Endpoint, Network, SaaS Applications and Cloud assets, directly supporting the "Crawl-Walk-Run" program phases. Ensure DLP policies meet diverse data sovereignty, privacy (GDPR, CCPA, etc.), and national regulatory requirements.


• Run vulnerability management programs for endpoints and servers and ensure they are patched according to the policy in collaboration with stakeholders.

Job Requirements

• 5+ years of experience in cybersecurity


• Handson experience with security tools like EDR, SWG, CASB, ZTNA, SSPM and DLP


• Experience managing technical vulnerability of OS and applications for endpoints using tools like CrowdStrike Spotlight, InsightVM, Tenable, Qualys.


• Familiarity with cybersecurity frameworks and best practices, such as MITRE, NIST, CIS, ISO27001, SOC and others.


• Experience in collaborating with internal stakeholders to rollout enterprise security solutions.


• Understanding and having the ability to utilize Cloud platforms such as AWS, GCP, Azure to host security tooling. Having experience in utilizing SIEM to query security telemetry is a plus.


• Experience managing secure email gateway is a plus.


• Excellent English in both verbal and written.


• On call schedule for weekends, activates for P1s.

Advantages

• CISSP, and AWS/GCP cloud engineer (associate/professional)

Total Rewards

Our workforce deserves fair and competitive pay that meets them where they are. With scalable benefits, rewards, and perks, our total rewards programs reflect our commitment to inclusivity and access for all.

• Our salary range reflects gross base salary. For commercial roles with commission eligibility, this figure represents On-Target Earnings (OTE), inclusive of base salary and target commission.


• Salary ranges are quoted in USD as a consistent global reference. Your offer will be localized to your country's currency using a market-aligned conversion.


• Final pay is based on objective, job-related criteria including experience, skills, and location.


• We don't ask about salary history. Offers are based on the role and what you bring to it.

Some things you'll enjoy

• Stock grant opportunities dependent on your role, employment status and location


• Additional perks and benefits based on your employment status and country


• Optional flexible working office membership, with IWG

At Deel, we're an equal-opportunity employer that values diversity and positively encourage applications from suitably qualified and eligible candidates regardless of race, religion, sex, national origin, gender, sexual orientation, age, marital status, veteran status, disability status, pregnancy or maternity or other applicable legally protected characteristics.

Unless otherwise agreed, we will communicate with job applicants using Deel-specific emails, which include @deel.com and other acquired company emails like @payspace.com and @paygroup.com. You can view the most up-to-date job listings at Deel by visiting our careers page.

Deel welcomes persons with disabilities to apply to any of our open roles. We will provide application and/or interview accommodations on request throughout the recruitment, selection and assessment process for applicants with disabilities or other needs. If you require application and/or interview accommodations, please inform our Talent Acquisition Team via email ([e-mail]) and a team member will be in touch to ensure your equal participation.

As part of our hiring process, we primarily rely on interviews and role-related assessments. In limited cases, we may also consider informal background information relevant to the role, in line with our privacy and fairness obligations.

This application process may utilise Automated Employment Decision Tools (AEDT) and AI systems to assist in evaluating candidates based on experience level, technical skills and qualifications. This processing is conducted in compliance with applicable Data Protection, AI Governance and Labour Laws. We ensure human oversight is maintained in all final hiring decisions. Your personal data is not used to train AI models. For more information on how we process your personal data, please see our Recruitment Privacy Policy.

• For NYC Residents: In accordance with NYC Local Law 144, an independent bias audit has been conducted on AEDT