Security & IT Engineer

The role

You will own corporate security and identity infrastructure and lead the security compliance program. You will manage identity and access, endpoints, security operations, compliance, and customer trust.

What you will do

• Own Google Workspace as identity provider
• Roll out SSO and SCIM provisioning across SaaS tools
• Automate joiner/mover/leaver processes
• Run periodic access reviews
• Own device management including MDM and EDR
• Tune and triage SIEM detections
• Track vulnerability remediation
• Maintain and exercise incident response plan
• Run day-to-day work toward SOC 2 and other compliance processes
• Own responses to customer security questionnaires and assessments

Required qualifications

• 5+ years in IT systems, corporate security, or security engineering
• A clear, well-reasoned point of view on how a ~100-person startup should approach security
• Hands-on administration of Google Workspace and an SSO/SCIM stack
• Hands-on administration of MDM and EDR tooling
• Working knowledge of AWS IAM
• Scripting ability in Python or similar for automation
• Has been through at least one SOC 2 or ISO 27001 audit from the inside
• Writes clearly and precisely

Nice to have

• Experience Vanta or Drata
• AWS CloudFormation
• Auth0
• experience with SIEM detection engineering

Benefits

• medical coverage
• dental coverage
• vision coverage
• 401(k)
• flexible PTO
• learning and development stipend

Before you apply

• We do sponsor visas

About the company

Sofar Ocean is building the world's largest real-time ocean sensor network. The team is about 100 people based at Pier 28 in San Francisco.