Security Engineer, IT

Sofar Ocean

. Own Sofar’s corporate security and identity infrastructure .

Posted 10/17/2026full-timeSan Francisco • California • United StatesMid-LevelSenior💰 $150,000 - $200,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in corporate security and identity infrastructure management, with a strong focus on compliance programs, incident response, and vulnerability remediation. Proficient in managing Google Workspace, SSO/SCIM implementations, and device management tools.

Highest-signal resume keywords

Corporate Security ManagementGoogle Workspace AdministrationSSO/SCIM ImplementationSOC 2 Compliance ExperienceVulnerability Remediation

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security ComplianceIncident Response PlanningVulnerability TrackingScripting in PythonMDM ToolingEDR ToolingAWS IAM KnowledgeSIEM TuningAudit Evidence CollectionAccess Review Automation

Soft Skills

Clear WritingRelationship Management

Tools & Technologies

Google WorkspaceSSOSCIMMDMEDRAWS CloudFormationVantaDrataSIEMIncident Response Tools

Industry Keywords

SOC 2ISO 27001Startup EnvironmentSecurity QuestionnairesAccess Management

Tech Stack

Tools & technologies

AWSPython

About the role

Key responsibilities & impact

Own Sofar’s corporate security and identity infrastructure
Lead the security compliance program
Own Google Workspace as the identity provider
Roll out SSO and SCIM provisioning across SaaS tools
Automate joiner/mover/leaver processes and run periodic access reviews
Own device management, including MDM, EDR, and endpoint compliance policies
Tune and triage SIEM detections
Track vulnerability remediation across Dependabot findings and penetration test results
Maintain and exercise the incident response plan
Run day-to-day SOC 2 and other compliance processes
Maintain policies, operate the compliance platform, collect audit evidence, and review vendors and subprocessors
Own responses to customer security questionnaires and assessments
Manage relationships with the managed IT provider, security vendors and advisors, contractors, and auditors
Work alongside the managed IT partner handling helpdesk and facilities IT

Requirements

What you’ll need

5+ years in IT systems, corporate security, or security engineering
Experience ideally at a startup
Clear, well-reasoned approach to security for a ~100-person startup
Hands-on administration of Google Workspace and an SSO/SCIM stack
Experience with MDM and EDR tooling
Working knowledge of AWS IAM
Scripting ability in Python or similar
Experience with at least one SOC 2 or ISO 27001 audit from the inside
Clear and precise writing
Nice to have: Vanta or Drata, AWS CloudFormation, Auth0
Nice to have: SIEM detection engineering

Benefits

Comp & perks

Equity
Medical coverage
Dental coverage
Vision coverage
401(k)
Flexible PTO
Learning and development stipend
Visa sponsorship support, including an immigration lawyer