OverviewAs Platform Security Lead at Deel, you design and govern the security architecture for our applications, services, and cloud environments (focused on AWS).

You implement secure design patterns, guardrails, and CI/CD security integration, shaping how engineering teams build securely.

You drive platform-wide security programs, threat modeling, and incident response to reduce risk while enabling fast, compliant product delivery.

Join a team that scales security across a integral, multi-tenant SaaS platform with AI-enabled capabilities.

Compensaciones / BeneficiosStock grant opportunities

Flexible working office membership (optional)

Competitive compensation and scalable benefits

Global, inclusive culture

AI-enabled security initiatives

ResponsabilidadesDefine and own the platform security architecture strategy across applications, services, and cloud environments (AWS focus)

Operate and tune security tooling (Wiz, Aikido) to align findings with actionable engineering fixes

Design and enforce identity and access controls at all layers (IAM, just-in-time access, SCPs)

Embed security into SDLC and CI/CD with guardrails for code and IaC

Secure containers and Kubernetes (image hardening, runtime, pod standards)

Own software supply chain security (SBOMs, dependency risk, provenance)

Lead threat modeling and integrate it into engineering design

Manage vulnerability management and remediation with engineering partners

Lead platform security incident response (triage, containment,



forensics, hardening)

Collaborate with Privacy/Compliance to meet SOC 2 II, ISO , PCI DSS, GDPR

Scale security through a Security Champions program and secure coding enablement

Act as technical authority on platform security and influence cloud strategy

Leverage AI to improve security posture and secure AI features

Requisitos principales3+ years in cybersecurity with cloud and application security depth

Deep AWS security expertise (IAM, network controls, logging, data protection)

Strong application security knowledge (OWASP Top 10, API security)

Experience with security platforms (Wiz/Orca/Prisma Cloud; Aikido/Snyk/Semgrep/GitHub Advanced Security) and integrating into workflows

CI/CD security experience for code and IaC

Kubernetes security and container hardening

Threat modeling experience (STRIDE, attack trees)

Production code proficiency in TypeScript/Node.js, Python, Go, or Java

Secrets management and encryption best practices

Experience with vulnerability management or bug bounty programs

Knowledge of SOC 2 II, ISO , PCI DSS, GDPR

Ability to translate security concepts into engineering guidance

Excellent English communication

Effective communicator with engineers and executives

Collaborative, cross-functional partner risk-based decision making

AWS IAM, network controls, CloudTrail, Security Hub, GuardDuty

SAST/DAST/SCA, secrets detection

CI/CD security gates for code and IaC

📌 Platform Security Architect - España (Valladolid)
🏢 Deel
📍 Valladolid