Team Lead, Platform Security Architect

As Team Lead, Security Operations, you own Deel's security operations pod end-to-end with an AI-first mindset. You will manage a globally distributed team of security analysts, set strategy and metrics for threat detection and response, and stay hands-on with major incidents, hunting, and detection development. You will govern the MSSP relationship and ensure seamless, high-quality security outcomes across regions. You will drive the AI-first security operations program from requirements to day-two operations. You’ll tackle threat hunting, insider threat, incident response, and phishing efforts in a remote-first, AWS-native environment.

• Stock grant opportunities
• Flexible working office membership (IWG)
• Broad total rewards program
• Additional country-based perks
• Remote-friendly policies

• Lead and develop the Security Operations pod across regions
• Own end-to-end incident response and act as escalation point for high-severity incidents
• Lead modernization program for SIEM/SOAR platforms and operationalize detection parity
• Govern MSSP relationship including SLAs, escalation criteria, and QBRs
• Build and run threat hunting and detection engineering aligned to MITRE ATT&CK

• Experience leading security operations teams (globally distributed)
• Strong incident response leadership and runbook development
• Experience with SIEM/SOAR modernization and deployment
• Vendor and partner governance experience with MSSPs
• Threat hunting and detection engineering capabilities
• Knowledge of AWS-native environments
• Familiarity with MITRE ATT&CK
• Excellent cross-functional collaboration and communications

• Collaborative leadership
• Blameless post-incident culture
• Adaptability across time zones
• SIEM/SOAR modernization
• Incident response management
• Threat hunting