Enterprise Security Engineer

Pave; San Francisco (CA); Hybrid; USD 220,000 - 260,000; Full time

Benefits offered by this job

Health coverage

Flexible PTO

Meal stipends

Education stipend

Parental leave

Commuter stipend

Job summary

Pave is hiring a Corporate Security Engineer to own identity and access management, endpoint protection, and SaaS security across a growing global team. You will automate SOC2/ISO27001 controls and build AI-powered processes that reduce toil while strengthening governance.

You’ll partner with IT and the helpdesk to design scalable security systems, mentor junior staff, and drive proactive security improvements across five locations and regional hubs.

Qualifications

• 5+ years of hands-on corporate/enterprise security or IT security engineering experience at a multi-office company.
• Okta (or equivalent IdP) administration at the design level — you've built an access model, not just operated one
• Experience operating within SOC2 and/or ISO27001: controls you owned passed audits
• Hands-on MDM/EDR and Google Workspace–class SaaS estate administration as a primary owner
• A track record of shipped automations with concrete before/after impact
• Demonstrated, specific use of AI tooling in your own workflows

Responsibilities

• Identity & Access Management: Own Okta and Pave's access-management model: role/group architecture, lifecycle automation, SSO/SCIM, and the exception process
• Compliance Operations: Own the SOC2 TypeII and ISO27001 controls that touch corporate IT, end to end
• Endpoint & SaaS Security: Own endpoint protection across a five-location, ~175-person company; run SaaS vendor security reviews and feed data sources into our SIEM
• Automation & AI: Engineer away manual IT toil— laptop setup, onboarding/offboarding provisioning, access requests— using APIs, workflow tooling, and AI agents
• Partnership: Design the systems that Pave's helpdesk (in G&A) operates day to day; be the design counterpart that makes that team stronger and more self-sufficient

Skills

Identity & Access Management

Okta Administration

SOC 2 & ISO 27001

MDM/EDR Management

SaaS Security Administration

Automation & AI in IT

AI tooling usage

Tools

Okta

GCP

Google Workspace

SIEM

SentinelOne

Claude code

Cloud security tools

Job description

Who We Are

At Pave, we're building the industry’s leading compensation platform, combining the world's largest real‑time compensation dataset with deep expertise in AI and machine learning. Our platform is perfecting the art and science of pay to give 8,500+ companies unparalleled confidence in every compensation decision.

Top tier companies like OpenAI, McDonald’s, Instacart, Atlassian, Synopsys, Stripe, Databricks, and Waymo use Pave, transforming every pay decision into a competitive advantage. $190+ billion in total compensation spend is managed in our workflows, and 80% of Forbes AI 50 use Pave to benchmark compensation.

The future of pay is real‑time & predictive, and we’re making it happen right now. We’ve raised $160M in funding from leading investors like Andreessen Horowitz, Index Ventures, Y Combinator, Bessemer Venture Partners, and Craft Ventures.

The Security Team @ Pave

Security at Pave protects the world's largest real‑time compensation dataset and the company that runs on it. The team is small, senior, and AI pilled: everyone builds, everyone automates, and everyone flexes across domains. As Pave's Corporate Security Engineer, you'll own the corporate side of that mission: identity and access management, endpoint protection, SaaS security, and the corporate compliance operations behind our SOC 2 Type II and ISO 27001 programs, with an explicit charter to aggressively automate all the things.

What You'll Be Doing

• Identity & Access Management
  • Own Okta and Pave's access-management model: role/group architecture, lifecycle automation, SSO/SCIM, and the exception process
  • Keep the RBAC model current and consistently enforced, with automation that prevents drift
• Compliance Operations
  • Own the SOC2 TypeII and ISO27001 controls that touch corporate IT, end to end
  • Automate evidence collection and user access reviews
• Endpoint & SaaS Security
  • Own endpoint protection (MDM/EDR) across a five-location, ~175-person company
  • Run SaaS vendor security reviews and build shadow‑IT visibility; feed IT‑controlled data sources into our SIEM
• Automation & AI
  • Engineer away manual IT toil— laptop setup, onboarding/offboarding provisioning, access requests— using APIs, workflow tooling, and AI agents
  • Build governance for employee‑built internal apps: publish detection, automated review checks, sane sharing models
• Partnership
  • Design the systems that Pave's helpdesk (in G&A) operates day to day; be the design counterpart that makes that team stronger and more self‑sufficient

What You'll Bring

• Required Qualifications
  • 5+ years of hands‑on corporate/enterprise security or IT security engineering experience at a multi‑office company
  • Okta (or equivalent IdP) administration at the design level — you've built an access model, not just operated one
  • Experience operating within SOC2 and/or ISO27001: controls you owned passed audits
  • Hands‑on MDM/EDR and Google Workspace–class SaaS estate administration as a primary owner
  • A track record of shipped automations with concrete before/after impact
  • Demonstrated, specific use of AI tooling in your own workflows
• Preferred Qualifications
  • Previous management experience
  • Came up through IT/helpdesk into security (or similar path), so you have empathy for the people you’re supporting and first hand experience with the toil you’re here to automate away
  • Experience with Okta, GCP, Iru, Sentinel one, Claude code
  • Vendor security review / third‑party risk experience
  • Background at a 150–500 person B2B SaaS company handling sensitive data
  • Networking fundamentals

Compensation, It's What We Do.

At Pave, we believe compensation should be as thoughtful as the people we hire. Your total rewards package includes meaningful equity, best‑in‑class medical, dental, and vision coverage, unlimited PTO, and region‑specific benefits designed around your life— not just your role. Your level and compensation are determined by your experience and how you show up throughout the interview process. We're always happy to walk you through how we think about leveling— just ask.

The targeted cash compensation for this position is (level depends on experience and performance in the interview process): Compensation: $220,000+(base) and equity included

Benefits @ Pave

At Pave, growth isn't a perk— it's the point. As you develop, your role expands, your responsibilities deepen, and your compensation reflects the impact you're making.

What we offer:

• Your Health, Fully Covered: Comprehensive medical, dental, and vision coverage for you and your family, with a range of options designed to meet you where you are.
• Time That's Actually Yours: Flexible PTO and the freedom to work from anywhere in the world for up to a month— because life doesn't pause, and neither should you.
• Fuel for the Work: Lunch and dinner stipends plus fully stocked kitchens, so you can stay energized without thinking twice about it.
• Room to Keep Growing: A quarterly education stipend to invest in the skills and knowledge that matter most to you.
• Support When It Matters Most: Robust parental leave so you can be fully present for the moments that count.
• Getting Here, Made Easier: A commuter stipend to support the in‑person collaboration that makes great work happen.

Life @ Pave

Founded in 2019 with a clear purpose and a team that has never wavered from it, Pave has grown into a global force in compensation management— giving thousands of companies the tools to take control, build confidence, and earn credibility in every pay decision they make. And we're just getting started. Headquartered in San Francisco's Financial District, with regional hubs in New York City's Flatiron District, Salt Lake City, Kraków (Poland), and the United Kingdom— wherever you're based, you'll find the same thing: people who genuinely care about the work, each other, and the customers that rely on Pave.

We run a hybrid culture that brings teams together in person 3 to 4 days a week— and every Friday, the whole company gathers for our Team Sync: breakfast, new hire welcomes, product updates, fireside chats, and yes, the occasional Kahoot. It's one of the things people notice when they join us— that we truly enjoy spending time together.

Our culture is shaped by five values we live every day:

• Be Intellectually Honest— Truth over comfort. We face reality clearly and speak directly, even when it's hard.
• Play to Win— We're not here to participate. We're here to be the #1 compensation platform in the world, and we act like it.
• Uphold the Pave Platinum Standard— We hold ourselves to the highest bar— for our customers, our data, and each other.
• One Team— We win and lose together. Titles don't drive decisions here— shared goals do.
• Hug of Jawn— Hard to define, impossible to miss. Ask your recruiter.

Our Vision: Unlock a labor market built on trust.

Our Mission: Build confidence in every compensation decision.

We build software that transforms how companies pay their people— and we believe the team behind that software deserves the same thoughtfulness. If you're ready to help shape the future of compensation alongside people who are smart, humble, and genuinely motivated by the problem we're solving, we'd love to meet you.