Senior Security Engineer

The Security Team @ Pave

Security at Pave protects the world's largest real-time compensation dataset and the company that runs on it. The team is small, senior, and AI pilled: everyone builds, everyone automates, and everyone flexes across domains. As Pave's Corporate Security Engineer, you'll own the corporate side of that mission: identity and access management, endpoint protection, SaaS security, and the corporate compliance operations behind our SOC 2 Type II and ISO 27001 programs, with an explicit charter to aggressively automate all the things.

What You'll Be Doing

• Identity & Access Management
• Own Okta and Pave's access-management model: role/group architecture, lifecycle automation, SSO/SCIM, and the exception process
• Keep the RBAC model current and consistently enforced, with automation that prevents drift
• Compliance Operations
• Own the SOC 2 Type II and ISO 27001 controls that touch corporate IT, end to end
• Automate evidence collection and user access reviews
• Endpoint & SaaS Security
• Own endpoint protection (MDM/EDR) across a five-location, ~175-person company
• Run SaaS vendor security reviews and build shadow-IT visibility; feed IT-controlled data sources into our SIEM
• Automation & AI
• Engineer away manual IT toil — laptop setup, onboarding/offboarding provisioning, access requests — using APIs, workflow tooling, and AI agents
• Build governance for employee-built internal apps: publish detection, automated review checks, sane sharing models
• Partnership
• Design the systems that Pave's helpdesk (in G&A) operates day to day; be the design counterpart that makes that team stronger and more self-sufficient

What You'll Bring

• Required Qualifications
• 5+ years of hands-on corporate/enterprise security or IT security engineering experience at a multi-office company
• Okta (or equivalent IdP) administration at the design level — you've built an access model, not just operated one
• Experience operating within SOC 2 and/or ISO 27001: controls you owned passed audits
• Hands-on MDM/EDR and Google Workspace–class SaaS estate administration as a primary owner
• A track record of shipped automations with concrete before/after impact
• Demonstrated, specific use of AI tooling in your own workflows
• Preferred Qualifications
• Previous management experience
• Came up through IT/helpdesk into security (or similar path), so you have empathy for the people you’re supporting and first hand experience with the toil you’re here to automate away
• Experience with Okta, GCP, Iru, Sentinel one, Claude code
• Vendor security review / third-party risk experience
• Background at a 150–500 person B2B SaaS company handling sensitive data
• Networking fundamentals

Compensation, It's What We Do.

At Pave, we believe compensation should be as thoughtful as the people we hire. Your total rewards package includes meaningful equity, best-in-class medical, dental, and vision coverage, unlimited PTO, and region-specific benefits designed around your life — not just your role. Your level and compensation are determined by your experience and how you show up throughout