Senior Corporate Security Engineer

About the role

Fun builds the infrastructure behind consumer-facing fintech applications, handling onboarding, account access and money movement for blockchain-based systems. Its Security Lead covers application, cloud and AI security, and is hiring a Senior Corporate Security Engineer to own the day-to-day security of employees' identities, laptops, SaaS tools and vendors. This is the first dedicated hire in the area, setting and maintaining the baseline.

Key responsibilities

• Identity and access: run SSO, MFA and automated provisioning (SCIM) across Google Workspace, build joiner/mover/leaver flows, run access reviews and keep admin and privileged access minimal.
• Endpoints: define and enforce macOS baselines via MDM (disk encryption, EDR, OS updates, compliance), tie device health to access, and address risks from AI agents and coding assistants on employee machines.
• SaaS security: harden Slack, Notion, Google Workspace, the CRM and the rest of the stack (least privilege, external sharing, guest controls, data protection), find and reduce shadow IT and keep licenses tight.
• Vendors and third parties: run security reviews for new vendors and integrations, maintain a tiered inventory of essential vendors, and plan for vendor breaches or outages.
• Detection and response: ensure identity, endpoint and SaaS activity is logged, own corporate incidents (phishing, account takeover, lost devices) and take part in incident response and blameless postmortems.
• Compliance and customer trust: own corporate and IT controls for SOC 2 and similar frameworks, with evidence collected automatically, and help answer enterprise customer security questionnaires.

Required profile

• 5+ years in corporate security, enterprise security or security-minded IT engineering, ideally at a fast-growing startup.
• Hands-on experience with an identity provider (Okta, Entra ID or Google Workspace as IdP), including SSO, SCIM and conditional access.
• Experience securing macOS fleets with an MDM (Jamf, Kandji, Fleet or similar) and EDR.
• Automation skills: writing Python, Bash or similar against APIs.
• Heavy daily use of AI tools like Claude Code, with good judgment about their risks.
• Risk-based judgment and the ability to explain tradeoffs to engineers, salespeople and executives.

Nice to have

• Terraform or other config-as-code for identity, MDM or SaaS.
• Experience at a crypto, fintech or payments company, or having taken a company through SOC 2 or ISO 27001.
• Incident response or SOC background, familiarity with blockchain analytics tools (Chainalysis, TRM), and experience supporting a team across time zones.

The role is primarily in-person at the Midtown, NYC headquarters, with Monday to Thursday in the office and optional WFH Fridays.