DevSecOps Engineer

Who we are and what we do

Deel is a global team that helps businesses hire anyone, anywhere, easily. Deel consists of more than three thousand self-driven individuals spanning over 100 countries. Our unified yet diverse culture keeps us continually learning and innovating the Deel platform and our products for customers.

Companies should be able to hire the best talent anywhere in the world, so we are building the best platform to make that a reality. Our market-leading technology, expertise, and global team are crucial to the success of Deel’s platform. We deliver the best products and platform features in our space, enabling millions of jobs worldwide and connecting the global workforce with the best companies and opportunities.

Why should you be part of Deel's success story?

A 30-mile hiring radius should no longer dictate how companies hire because great talent lives everywhere. Deel sees a world without hiring borders and endless talent that pairs perfect candidates with great companies.

We offer global teams all the tools they need to hire, onboard, manage, pay, and scale at full speed. We aim to foster a diverse global economy by building a generational platform that seamlessly connects companies with talent worldwide.

After our successful Series D in 2021, we raised another $50M last year, doubling our valuation to $12B.

There’s never been a more exciting time to join Deel — the market leader in international payroll and compliance.

We are currently seeking a DevSecOps Engineer to join our team. If you have a passion for development, security, and infrastructure, we invite you to apply for this exciting opportunity. You'll have the chance to work alongside experienced professionals in the IT industry who provide mutual support and knowledge sharing. As we continuously expand our product offerings and customer base, you will play a key role in leading our growth journey.

Responsibilities

Security Automation: Develop and maintain automated security tools and processes to identify vulnerabilities, perform code analysis, and conduct security testing. This includes integrating security scanners, static code analysis tools, and vulnerability assessment tools into the CI/CD pipeline.

Secure Infrastructure: Work with infrastructure and operations teams to design and implement secure cloud infrastructure, network architecture, and deployment processes. This involves ensuring proper access controls, encryption, and monitoring are in place.

Continuous Monitoring: Implement security monitoring tools and processes to proactively identify and respond to security events and anomalies. This includes log analysis, intrusion detection, and system monitoring.

Secure Coding Practices: Promote and enforce secure coding practices within the development teams. Provide guidance on secure coding techniques, code reviews, and security testing methodologies.

Collaboration and Communication: Foster collaboration and communication between development, operations, and security teams. Act as a liaison to ensure that security requirements are understood and integrated into the development process.

Compliance and Auditing: Assist in compliance assessments and audits to ensure adherence to regulatory requirements and industry standards. Collaborate with auditors and provide necessary documentation and evidence of security controls.

Desired Skills and Experience

• 3+ years of relevant DevOps, SecOps, DevSec work experience in Production environments

• Software Development: Basic programming skills and experience with software development practices are crucial. Understanding languages like JavaScript, TypeScript, Python and concepts such as version control (e.g., Git), continuous integration/continuous delivery (CI/CD) pipelines

• Security Knowledge: Familiarity with security principles, standards, and best practices is essential. This includes knowledge of common security vulnerabilities (e.g., OWASP Top 10), secure coding practices, encryption, authentication, access control, and security testing methodologies.

• DevOps Practices: Proficiency in DevOps methodologies and tools is important. This involves understanding CI/CD pipelines, infrastructure automation (e.g., using tools like Docker, Kubernetes), configuration management, and monitoring/observability practices.

• Risk Assessment and Mitigation: The ability to assess risks and apply appropriate security controls is crucial. Understanding threat modeling, risk assessment techniques, vulnerability management, and incident response planning can help identify and mitigate security risks effectively.

• Collaboration and Communication: DevSecOps requires effective collaboration and communication skills. You should be able to work closel