Security & IT Engineer

Sofar Ocean•San Francisco, CA

6d•$150,000 - $200,000

About The Position

Sofar Ocean is building a global real-time ocean sensor network, with Spotter buoys collecting ocean data and software such as Wayfinder supporting voyage optimization for commercial shipping, government, and defense customers. The company has about 100 employees and is based at Pier 28 in San Francisco. The Security & IT Engineer will own Sofar’s corporate security and identity infrastructure and lead its security compliance program. The role turns security priorities into operational controls and serves as the internal point person for customer security reviews. Helpdesk and facilities IT are handled by a managed IT partner, with whom this position will work. The role is preferred to be based at the Pier 28 office in San Francisco a few days per week, but remote applicants are welcome. The base salary range is $150,000 to $200,000, plus equity. Final compensation depends on experience and skills. Benefits include medical, dental, and vision coverage, a 401(k), flexible PTO, and a learning and development stipend. Sofar sponsors visas and provides immigration-lawyer support, though sponsorship cannot be guaranteed for every role or situation.

Requirements

At least 5 years of experience in IT systems, corporate security, or security engineering, ideally at a startup.
A clear, well-reasoned point of view on how a roughly 100-person startup should approach security, including early investment priorities, accepted risks, and sequencing compliance work; ability to defend and adjust that approach as context changes.
Hands-on administration of Google Workspace and an SSO/SCIM stack, plus MDM and EDR tooling.
Working knowledge of AWS IAM.
Scripting ability in Python or a similar language for automation.
Experience participating in at least one SOC 2 or ISO 27001 audit from the inside.
Clear and precise writing, with a preference for defensible claims over optimistic ones.

Nice To Haves

Experience with Vanta or Drata.
Experience with AWS CloudFormation.
Experience with Auth0.
Experience with SIEM detection engineering.

Responsibilities

Own Google Workspace as the identity provider; roll out SSO and SCIM provisioning across SaaS tools, automate joiner/mover/leaver processes, and conduct periodic access reviews.
Own device management, including MDM, EDR, and endpoint compliance policies.
Tune and triage SIEM detections.
Track vulnerability remediation for Dependabot findings and penetration-test results.
Maintain and exercise the incident response plan.
Run day-to-day SOC 2 and other compliance processes, including maintaining policies, operating the compliance platform, collecting audit evidence, and reviewing vendors and subprocessors.
Own responses to customer security questionnaires and assessments, keeping answers accurate, consistent, and defensible.
Manage day-to-day relationships with the managed IT provider, security vendors and advisors, contractors, and auditors.