Impress employers and recruiters.
Choose from hundreds of resume examples.
Impress employers and recruiters.
Choose from hundreds of resume examples.
Tailor your resume to this Security & IT Engineer role.
Rezi rewrites your resume against Sofar Ocean's job description. Free.
Tailor your resume to this Security & IT Engineer role.
Rezi rewrites your resume against Sofar Ocean's job description. Free.
Don't guess if your resume is good enough.
See how it scores against the Security & IT Engineer posting at Sofar Ocean — free, in seconds.
Don't guess if your resume is good enough.
See how it scores against the Security & IT Engineer posting at Sofar Ocean — free, in seconds.
About the Role
Sofar's Corporate Security and Identity Infrastructure Lead will own the security compliance program, turning priorities into working controls, and serving as the internal point person for customer security reviews. This role will collaborate with a managed IT partner for helpdesk and facilities IT.
Responsibilities
- Own Google Workspace as the identity provider, rolling out SSO and SCIM provisioning across SaaS tools.
- Automate joiner, mover, and leaver processes and conduct periodic access reviews.
- Own device management (MDM, EDR) and endpoint detection and response, including device compliance policies.
- Tune and triage SIEM detections.
- Track vulnerability remediation across Dependabot findings and pen test results.
- Maintain and exercise the incident response plan.
- Manage day-to-day compliance activities for SOC 2 and other processes, including policy maintenance, compliance platform operation, audit evidence collection, and vendor/sub-processor reviews.
- Own responses to customer security questionnaires and assessments, ensuring accuracy and consistency.
- Manage day-to-day relationships with managed IT providers, security vendors, advisors, contractors, and auditors.
Requirements
- 5+ years in IT systems, corporate security, or security engineering, ideally at a startup.
- A clear, well-reasoned point of view on security strategy for a ~100-person startup, including investment priorities, risk acceptance, and compliance sequencing.
- Hands-on administration of Google Workspace and an SSO/SCIM stack.
- Hands-on administration of MDM and EDR tooling.
- Working knowledge of AWS IAM.
- Scripting ability in Python or similar for automation.
- Experience participating in at least one SOC 2 or ISO 27001 audit from the inside.
- Clear and precise writing skills.
Skills
- Google Workspace administration
- SSO/SCIM provisioning
- MDM
- EDR
- AWS IAM
- Python scripting
- SOC 2 audit process
- ISO 27001 audit process
- SIEM detection engineering
Location
- San Francisco, CA (Hybrid)
- Remote
Work Type
- Hybrid
- Remote
Experience Level
- 5+ years
Salary/Compensations
- $150,000 to $200,000
Benefits
- Equity
- Medical coverage
- Dental coverage
- Vision coverage
- 401(k)
- Flexible PTO
- Learning and development stipend
About the Company
- Sofar Ocean is building the world's largest real-time ocean sensor network using Spotter buoys to collect global ocean data.
- Their software, including Wayfinder, transforms data into decisions for commercial shipping, government, and defense customers.
- The company has approximately 100 employees and is based in San Francisco, experiencing rapid growth.
Equal Opportunity
- Sofar Ocean is an equal opportunity employer.
- They welcome applicants of all backgrounds and do not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other protected characteristic.