Team Lead, Platform Security Architect

About the role

Deel, an all-in-one payroll and HR platform for global teams, is looking for a Team Lead, Security Operations. You will own the security operations pod end to end with an AI-first mindset, acting as a player-coach: managing a globally distributed team of security analysts, setting strategy and metrics for threat detection and response, and staying hands-on on major incidents, hunting and detection building.

Key responsibilities

• Lead and coach a team of Security Analysts across regions, set goals, run performance and career conversations and build a high-trust, blameless culture; flex working hours when needed.
• Own incident response end to end: act as escalation point and incident commander for high-severity incidents, define severity matrix and runbooks, coordinate with Engineering, IT, Legal and People, and run blameless post-incident reviews.
• Lead the SIEM/SOAR modernization: requirements, evaluation, implementation, migration and operation of a modern SIEM/AI SOC platform, including log onboarding, detection parity, detection-as-code, SOAR playbook migration, parallel run and cutover.
• Govern the MSSP partnership: SLAs, escalation criteria, alert-tuning feedback, quality sampling of tier-one work, QBRs and a seamless handoff between partner and internal response.
• Build and run the threat hunting and detection engineering program: hypothesis-driven hunts mapped to MITRE ATT&CK, detection lifecycle, coverage gap analysis, threat intelligence integration and alert-fatigue reduction.
• Lead strategy from requirements through data onboarding, detection parity, SOAR automation, cutover and day-two operations, covering threat hunting, insider threat, incident response, purple teaming and phishing and email threat assessment in a remote-first, AWS-native environment.

What we offer

• Salary range quoted in USD, with offers localized to the candidate's country.
• Stock grant opportunities depending on role, employment status and location.
• Additional perks and benefits depending on employment status and country.
• Optional flexible working office membership with IWG.