Security & IT Engineer
Owns Sofar Ocean's corporate security and identity infrastructure — Google Workspace IdP with SSO/SCIM, MDM/EDR, SIEM triage and incident response — while running the SOC 2 compliance program and handling customer security reviews. Based at the Pier 28 office in San Francisco a few days a week; remote applicants considered.
- Compensation
- $150K–$200K / yr
- Location
- Bay Area
- Work setup
- Hybrid
- Seniority
- Not specified
- Employment
- Not specified
- Experience
- 5+ years
- Category
- Software engineering
- Posted
Skills
Must have
- 5+ years in IT systems, corporate security, or security engineering, ideally at a startup
- Well-reasoned point of view on how a ~100-person startup should approach security (investment, risk acceptance, sequencing compliance)
- Hands-on administration of Google Workspace and an SSO/SCIM stack
- Hands-on experience with MDM and EDR tooling
- Working knowledge of AWS IAM
- Scripting ability in Python or similar for automation
- Has been through at least one SOC 2 or ISO 27001 audit from the inside
- Writes clearly and precisely; prefers defensible claims to optimistic ones
Nice to have
- Experience with Vanta or Drata
- Experience with AWS CloudFormation
- Experience with Auth0
- Experience with SIEM detection engineering
Full description
About Sofar Ocean
Sofar Ocean is building the world's largest real-time ocean sensor network. Our Spotter buoys collect ocean data across the globe, and our software, including Wayfinder for voyage optimization, turns that data into decisions for commercial shipping, government, and defense customers. We're a team of about 100 based at Pier 28 in San Francisco, and we're growing fast.
About the role
You’ll own Sofar’s corporate security and identity infrastructure and lead our security compliance program. You’ll turn security priorities into working controls, and be the internal point person for customer security reviews. Helpdesk and facilities IT are handled by our managed IT partner, whom you’ll work alongside.
What you’ll do
- Identity and access: own Google Workspace as our identity provider. Roll out SSO and SCIM provisioning across our SaaS tools, automate joiner/mover/leaver processes, and run periodic access reviews.
- Endpoints: own device management (MDM, EDR) and endpoint detection and response, including device compliance policies.
- Security operations: tune and triage SIEM detections. Track vulnerability remediation across Dependabot findings and pen test results. Maintain and exercise our incident response plan.
- Compliance: run day-to-day work toward SOC 2 and other compliance processes. That includes maintaining policies, operating our compliance platform, collecting audit evidence, and reviewing vendors and subprocessors.
- Customer trust: own responses to customer security questionnaires and assessments. Keep our answers accurate, consistent, and defensible.
- Vendors: manage day-to-day relationships with our managed IT provider, security vendors and advisors, contractors, and auditors.
What you bring
- 5+ years in IT systems, corporate security, or security engineering, ideally at a startup
- A clear, well-reasoned point of view on how a ~100-person startup should approach security, including where to invest early, where to accept risk, and how to sequence compliance work. You can defend that view and adjust it when the context changes.
- Hands-on administration of Google Workspace and an SSO/SCIM stack, plus MDM and EDR tooling
- Working knowledge of AWS IAM. Scripting ability in Python or similar for automation.
- Has been through at least one SOC 2 or ISO 27001 audit from the inside
- Writes clearly and precisely. You prefer a defensible claim to an optimistic one.