Information Security Engineer

In this role you will be a technical security leader responsible for designing and optimizing Deel’s core security platforms. You will own the lifecycle of multiple security solutions, improving defense-in-depth and ensuring regulatory compliance across a global, remote-first environment. You will collaborate with cross-functional teams to translate controls into actionable safeguards, shaping how Deel protects data and enables secure, scalable work for customers. This is a hands-on role at the forefront of the global work revolution with meaningful impact on security posture and policy enforcement.

• Stock grant opportunities
• Flexible office membership optional
• Total rewards program
• Healthcare and benefits
• Competitive base salary and location-based offer
• Remote-friendly / remote-first culture

• Serve as SME for Endpoint Detection and Response (EDR) tools, optimizing configurations, developing threat rules, and enhancing security on endpoints and cloud assets
• Configure and tune security policies across SWG, CASB and ZTNA; assist users with issues
• Improve SaaS security posture via SSPM tools and processes, aligning security controls with application owners
• Develop review, approval, policy enforcement and auditing for browser extensions and third-party OAuth apps (Google Workspace, GitHub, Jira, etc.)
• Design, implement and audit security policies for enterprise browsers (Island, Chrome Enterprise), including DLP, ZTNA and secure browsing
• Implement and manage DLP policies across endpoints, networks, SaaS, and cloud assets to meet data sovereignty and privacy requirements
• Lead vulnerability management programs for endpoints and servers and coordinate patching with stakeholders

• 5+ years in cybersecurity
• Hands-on experience with EDR, SWG, CASB, ZTNA, SSPM, DLP
• Experience managing OS/app vulnerabilities on endpoints using CrowdStrike Spotlight, InsightVM, Tenable, Qualys
• Familiarity with MITRE, NIST, CIS, ISO27001, SOC and related frameworks
• Experience collaborating with internal stakeholders to roll out enterprise security solutions
• Understanding of cloud platforms (AWS, GCP, Azure) and ability to use SIEM for telemetry queries (plus)
• Experience managing secure email gateway (plus)
• Excellent English (verbal and written)
• On-call availability for weekends and P1 incidents
• Advantages: CISSP, AWS/GCP cloud engineer (associate/professional)

• Collaborative cross-functional communication
• Strong problem-solving and proactive mindset
• Attention to detail and policy discipline
• EDR
• SWG
• CASB