Enterprise Security Engineer

<div class="content-intro"><h3><span style="font-weight: 400; color: #4065ff;"><strong>Who We Are</strong></span></h3> <p><span style="font-size: 12pt;">At Pave, we're building the industry’s leading compensation platform, combining the world's largest real-time compensation dataset with deep expertise in AI and machine learning. Our platform is perfecting the art and science of pay to give 9,000+ companies unparalleled confidence in every compensation decision.</span></p> <p><span style="font-size: 12pt;">Top tier companies like OpenAI, McDonald’s, Instacart, Atlassian, Affirm, Ericsson, Synopsys, Stripe, Doordash, Fanatics, Databricks, and Waymo use Pave, transforming every pay decision into a competitive advantage. $190+ billion in total compensation spend is managed in our workflows, and 80% of <a href="https://www.forbes.com/lists/ai50/">Forbes AI 50</a> use Pave to benchmark compensation.</span></p> <p><span style="font-size: 12pt;">The future of pay is real-time & predictive, and we’re making it happen right now. We’ve raised $175M in funding from leading investors like Andreessen Horowitz (a16z), Index Ventures, Y Combinator, Insight Partners, Atomico, Venture Partners, and Craft Ventures.</span></p></div><h3><span style="color: rgb(64, 101, 255); font-size: 14pt; font-family: helvetica, arial, sans-serif;">The Security Team @ Pave</span></h3> <p class="font-claude-response-body break-words whitespace-normal" data-sourcepos="15:1-15:527;1021-1547"><span style="font-family: helvetica, arial, sans-serif; font-size: 12pt;">Security at Pave protects the world's largest real-time compensation dataset and the company that runs on it. The team is small, senior, and AI pilled: everyone builds, everyone automates, and everyone flexes across domains. As Pave's Corporate Security Engineer, you'll own the corporate side of that mission: identity and access management, endpoint protection, SaaS security, and the corporate compliance operations behind our SOC 2 Type II and ISO 27001 programs, with an explicit charter to aggressively automate all the things.</span></p> <h3><span style="color: rgb(64, 101, 255); font-size: 14pt; font-family: helvetica, arial, sans-serif;">What You'll Do</span></h3> <ul> <li style="font-size: 12pt; font-family: helvetica, arial, sans-serif;"><span style="font-size: 12pt; font-family: helvetica, arial, sans-serif;">Identity & Access Management</span></li> <ul> <li style="font-size: 12pt; font-family: helvetica, arial, sans-serif;"><span style="font-size: 12pt; font-family: helvetica, arial, sans-serif;">Own Okta and Pave's access-management model: role/group architecture, lifecycle automation, SSO/SCIM, and the exception process</span></li> <li style="font-size: 12pt; font-family: helvetica, arial, sans-serif;"><span style="font-size: 12pt; font-family: helvetica, arial, sans-serif;">Keep the RBAC model current and consistently enforced, with automation that prevents drift</span></li> </ul> <li style="font-size: 12pt; font-family: helvetica, arial, sans-serif;"><span style="font-size: 12pt; font-family: helvetica, arial, sans-serif;">Compliance Operations</span></li> <ul> <li style="font-size: 12pt; font-family: helvetica, arial, sans-serif;"><span style="font-size: 12pt; font-family: helvetica, arial, sans-serif;">Own the SOC 2 Type II and ISO 27001 controls that touch corporate IT, end to end</span></li> <li style="font-size: 12pt; font-family: helvetica, arial, sans-serif;"><span style="font-size: 12pt; font-family: helvetica, arial, sans-serif;">Automate evidence collection and user access reviews</span></li> </ul> <li style="font-size: 12pt; font-family: helvetica, arial, sans-serif;"><span style="font-size: 12pt; font-family: helvetica, arial, sans-serif;">Endpoint & SaaS Security</span></li> <ul> <li style="font-size: 12pt; font-family: helvetica, arial, sans-serif;"><span style="font-size: 12pt; font-family: helvetica, arial, sans-serif;">Own endpoint protection (MDM/EDR) across a five-location, ~175-person company</span></li> <li style="font-size: 12pt; font-family: helvetica, arial, sans-serif;"><span style="font-size: 12pt; font-family: helvetica, arial, sans-serif;">Run SaaS vendor security reviews and build shadow-IT visibility; feed IT-controlled data sources into our SIEM</span></li> </ul> <li style="font-size: 12pt; font-family: helvetica, arial, sans-serif;"><span style="font-size: 12pt; font-family: helvetica, arial, sans-serif;">Automation & AI</span></li> <ul> <li style="font-size: 12pt; font-family: helvetica, arial, sans-serif;"><span style="font-size: 12pt; font-family: helvetica, arial, sans-serif;">Engineer away manual IT toil — laptop setup, onboarding/offboarding provisioning, access requests — using APIs, workflow tooling, and AI agents</span></li> <li style="font-size: 12pt; font-family: helvetica, arial, sans-serif;"><span style="font-size: 12pt; font-family: helvetica, arial, sans-serif;">Build governance for employee-built internal apps: publish detection, automated review checks, sane sharing models</span></li> </ul> <li style="font-size: 12pt; font-family: helvetica, arial, sans-serif;"><span style="font-size: 12pt; font-family: helvetica, arial, sans-serif;">Partnership</span></li> <ul> <li style="font-size: 12pt; font-family: helvetica, arial, sans-serif;"><span style="font-size: 12pt; font-family: helvetica, arial, sans-serif;">Design