Responsibilities
- Act as the Subject Matter Expert (SME) for Endpoint Detection and Response (EDR) tools/process including optimizing configurations/policies, developing custom threat detection rules, and proactively improving Deel’s overall security posture for remote endpoints (Mac and Windows) and cloud assets (Eg, VMs).
- Configure, manage, and tune the full suite of security policies within SWG, CASB and ZTNA.
- Assist our remote colleague with seamless experience through troubleshooting end user issues as needed.
- Continuously improve SaaS security posture with SSPM tools and processes around it.
- Collaborate with diverse application owners, understand security control and resolve configuration drifts for our wide range of SaaS applications from baseline.
- Develop a rigorous review, approval, policy enforcement and auditing for browser extensions, third party OAuth applications for SaaS applications such as Google Workspace, GitHub, Jira etc to meet security and privacy standards.
- Design, implement, and audit security policies related to enterprise browsers (Eg, Island, Chrome Enterprise etc) including controlling access to sensitive web apps, and data loss prevention (DLP) configuration, ZTNA, secure web browsing experience but not limited to.
- Manage DLP policies across Endpoint, Network, SaaS Applications and Cloud assets, directly supporting the "Crawl-Walk-Run" program phases.
- Ensure DLP policies meet diverse data sovereignty, privacy (GDPR, CCPA, etc.), and national regulatory requirements.
- Run vulnerability management programs for endpoints and servers and ensure they are patched according to the policy in collaboration with stakeholders.
Requirements
- 5+ years of experience in cybersecurity.
- Hands-on experience with security tools like EDR, SWG, CASB, ZTNA and DLP.
- Familiarity with cybersecurity frameworks and best practices, such as MITRE, NIST, CIS, ISO27001, SOC and others.
- Experience in collaborating with internal stakeholders to rollout enterprise security solutions.
- Understanding and having the ability to utilize Cloud platforms such as AWS, GCP, Azure to host security tooling.
- Excellent English in both verbal and written.
Nice to Have
- Experience in utilizing SIEM to query security telemetry.
- Experience managing secure email gateway.
- CISSP
Benefits
- Stock grant opportunities dependent on your role, employment status and location.
- Additional perks and benefits based on your employment status and country.
- The flexibility of remote work, including optional WeWork access.
Work Arrangement
Remote (Worldwide)
Team
Team size: 7,000. Structure: spans more than 100 countries, speaks 74 languages, and brings a connected and dynamic culture that drives continuous learning and innovation for our customers.
Additional Information
- We are an equal-opportunity employer that values diversity and positively encourage applications from suitably qualified and eligible candidates regardless of race, religion, sex, national origin, gender, sexual orientation, age, marital status, veteran status, disability status, pregnancy or maternity or other applicable legally protected characteristics.
- We will communicate with job applicants using Deel-specific emails, which include @deel.com and other acquired company emails like @payspace.com and @paygroup.com.
- You can view the most up-to-date job listings at Deel by visiting our careers page.
- Deel is an equal-opportunity employer and is committed to cultivating a diverse and inclusive workplace that reflects different abilities, backgrounds, beliefs, experiences, identities and perspectives.
- Deel will provide accommodations on request throughout the recruitment, selection and assessment process for applicants with disabilities.
- As part of our hiring process, we primarily rely on interviews and role-related assessments.
- This application process does utilise Automated Employment Decision Tools (AEDT) and AI systems to assist in evaluating candidates based on experience level, technical skills and qualifications.
- As a fully remote company, we also utilise AI-powered deepfake and fraud detection technologies to verify the authenticity of candidate identities and interactions during assessments and interviews.
- Your personal data is not used to train AI models.
