Deel is the all-in-one payroll and HR platform for global teams. Our vision is to unlock global opportunity for every person, team, and business. Built for the way the world works today, Deel combines HRIS, payroll, compliance, benefits, performance, and equipment management into one seamless platform. Deel is the all-in-one payroll and HR platform for global teams. Our vision is to unlock global opportunity for every person, team, and business. Built for the way the world works today, Deel combines HRIS, payroll, compliance, benefits, performance, and equipment management into one seamless platform. As the fastest-growing Software as a Service (Saa S) company in history, Deel is transforming how global talent connects with world?We're not just building software; we're creating the infrastructure for the future of work, enabling a more diverse and inclusive global economy. CNBC Disruptor 50, Forbes Cloud 100, Deloitte Fast 500, and repeated recognition on Y Combinator's top companies list – all while maintaining a 4.83 average rating from 15,000 reviews across G2, Trustpilot, Captera, Apple and Google. At the forefront of the integral work revolution, you'll tackle complex challenges that impact millions of people's working lives. after leader in the transformation of global work. Deel is seeking a Platform Security Architect to own the security of our platform from the code our engineers write to the cloud it runs on. In this role, you'll design, build, and evolve the security architecture across two layers that can't be secured in isolation: our applications and services, and the AWS and Kubernetes infrastructure beneath them. impact position at the core of Deel's security engineering function, not a governance or advisory seat.



Responsibilities Own the platform security architecture strategy across Deel's applications, services, and cloud environments, with a primary focus on AWS. Define secure design patterns, reference architectures, guardrails, and baseline configurations that teams build against by default. Run Deel's security tooling as one program. Operate and tune Wiz for cloud posture (CSPM) and runtime visibility, and Aikido for SAST, SCA, secrets detection, container, Ia C, and DAST scanning. Connect findings across code and cloud so the team fixes what is actually exploitable, not what is merely noisy. privilege cloud IAM (cross?level access control). Embed security into the SDLC and CI/CD pipelines. Secure containers and Kubernetes. Set the standards for image hardening and signing, admission control, pod security, network policies, secrets management, and runtime protection. Own software supply chain security. Lead threat modeling for new and existing systems, and make it part of how engineering designs software rather than a security?Lead platform security incident response across application and cloud layers: triage, containment, forensics, root cause analysis, and post?Scale security through people. Build a Security Champions program and secure coding enablement so security knowledge spreads across engineering instead of pooling in the security team. Act as the technical authority on platform security, reviewing high?risk designs, evaluating vendors,



and influencing engineering and cloud strategy at the leadership level. Use Artificial Intelligence as an enabler to find new insights, learn from past mistakes, and continuously improve Deel's security posture, including securing the AI features Deel ships. on experience in cybersecurity, with real depth in both cloud security and application security engineering or architecture. Deep AWS security expertise: IAM design, network controls, logging and monitoring (Cloud Trail, Security Hub, Guard Duty), and data protection. Deep application security expertise: OWASP Top 10 and API Security Top 10, authentication and authorization design, injection and deserialization, SSRF, business logic flaws, and secure session handling. on experience operating security platforms such as Wiz (or Orca, Prisma Cloud) and Aikido (or Snyk, Semgrep, Git Hub Advanced Security), including rollout, tuning, false?Strong experience building security gates into CI/CD pipelines for both application code and Infrastructure as Code. Strong experience securing containers and Kubernetes: image hardening, runtime security, pod security standards, and Kubernetes RBAC. Ability to read, reason about, and write production code in at least one modern language (Type Script/Node.
Js, Python, Go, or Java). Experience with secrets management (Hashi Corp Vault, AWS Secrets Manager) and encryption patterns for data at rest and in transit. Ability to turn complex security concepts into clear guidance for engineers and risk?Excellent English, written and verbal. Advantageous Experience Background in software engineering, Dev Sec Ops, or platform engineering before moving into security. Offensive security background (web

📌 Security Architect (España)
🏢 Deel
📍 España