Enterprise Security & Compliance Engineer (SOC 2)

Varick Agents LTD.; San Francisco (CA); On-site; USD 150,000 - 210,000; Full time

Benefits offered by this job

Meaningful equity

Real ownership

Flexible PTO

Free lunch and dinner in the office

Uber home when staying late

Job summary

Varick is seeking a security/compliance engineer to own SOC 2 programs for regulated enterprises. You will harden the platform with access controls, secrets management, encryption, and security reviews across deployments.

You will serve as the technical point person for client security reviews and vendor questionnaires while setting security standards for engineering. We value hands-on implementation with SOC 2 and related standards, cloud security expertise across AWS/GCP/Azure, and a bias for

Qualifications

• 3+ years in security/compliance engineering with ownership of a program.
• Hands-on with SOC 2 and other standards, with technical evidence behind it.
• Strong cloud security knowledge (AWS, GCP, Azure) and IAM.
• Experience communicating with enterprise security teams.
• A builder's instinct: you automate compliance instead of running it on spreadsheets.

Responsibilities

• Own and run SOC 2 program from evidence collection through audit.
• Harden the platform: access controls, secrets management, encryption, and the security review of how agents touch client systems.
• Build the security tooling and monitoring that catches problems early across our deployments.
• Be the technical point person on client security reviews and vendor questionnaires, translating what we do into what their security team needs to hear.
• Set the security standards the engineering team builds against, and make the secure path the easy path.

Skills

Security engineering

Compliance engineering

Cloud security

Security liaison

Automation

Tools

SOC 2 tooling

Job description

Varick is seeking a security/compliance engineer to own SOC 2 programs for regulated enterprises. You will harden the platform with access controls, secrets management, encryption, and security reviews across deployments.

You will serve as the technical point person for client security reviews and vendor questionnaires while setting security standards for engineering. We value hands-on implementation with SOC 2 and related standards, cloud security expertise across AWS/GCP/Azure, and a bias for