Senior Corporate Security Engineer
The Fun Group, Inc. (Fun) provides global payments infrastructure for modern fintechs and internet capital markets, combining fiat and blockchain payment rails.
Funding history
Investors
Projects
About The Fun Group, Inc.
Fun is a technology company that orchestrates deposit, withdrawal, checkout, and stablecoin-payment flows across wallets, licensed payment providers, on-chain liquidity, and blockchain infrastructure. Its products support multi-chain asset movement, fiat on/off-ramps, stablecoin settlement, and unified crypto-and-fiat checkout for applications serving global users. Fun states that it provides technology infrastructure only, while payment and financial services are delivered by regulated partners under their own authorizations.
Skills
Candidate Availability
About the Role
You will be the first dedicated corporate security hire, setting the baseline as well as maintaining it. You will treat corporate security as an engineering problem, using configuration in code and automated access. You will own identity, endpoints, SaaS security, vendor risk, detection and response, and compliance controls such as SOC 2.
Requirements
- 5+ years in corporate security, enterprise security or security-minded IT engineering, ideally at a fast-growing startup
- Deep hands-on experience with an identity provider (Okta, Entra ID, or Google Workspace as IdP) including SSO, SCIM and conditional access
- Experience running macOS fleets securely with an MDM (Jamf, Kandji, Fleet or similar) and EDR
- Automation skills in Python, Bash or similar against APIs
- Heavy daily use of AI tools like Claude Code and good judgment about risk
- Sound risk-based judgment and ability to explain tradeoffs to engineers, salespeople and executives
Responsibilities
- Run SSO, MFA and automated provisioning (SCIM) across Google Workspace and the rest of the stack
- Build joiner/mover/leaver flows so access is granted on day one and removed within minutes
- Run regular access reviews and minimize admin and privileged access
- Define and enforce macOS baselines through MDM including disk encryption, EDR, OS updates and device compliance
- Tie device health to access
- Address risks of AI agents and coding assistants running on employee machines
- Harden Slack, Notion, Google Workspace, CRM and other SaaS tools
- Find and reduce shadow IT and keep seats and licenses tight
- Run security reviews for new vendors and integrations and maintain a tiered vendor inventory
- Plan for critical vendor breaches or outages
- Ensure identity, endpoint and SaaS activity is logged and actionable
- Own corporate incidents such as phishing, account takeover and lost devices and take part in company-wide incident response and postmortems
- Own corporate and IT controls for SOC 2 and similar frameworks with automated evidence collection
- Help answer enterprise customers' security questionnaires and reviews
Benefits
- Optional work-from-home Fridays
