Security Compliance Engineer | SOC 2, CMMC & GRC

Socket.dev; New York (NY); Hybrid; USD 120,000 - 185,000; Full time

Job summary

Snorkel AI seeks a hands-on Technical Compliance Analyst to maintain SOC 2 posture, advance toward CMMC readiness, and bridge compliance with engineering and delivery. You will influence architecture, automate policy enforcement, and enable faster enterprise sales with pristine evidence.

You will partner across IT, Security, Product, and Delivery to bake in compliance by design, translating controls into actionable tasks and driving continuous improvement in security posture.

Qualifications

• Bachelor's degree in IT, security, or related field.
• Experience supporting SOC 2 Type I/II audits and ITGC controls.
• Strong understanding of cloud infrastructure and encryption.
• Ability to translate controls into developer tasks and automate evidence collection.

Responsibilities

• Draft precise responses to security questionnaires and RFPs.
• Maintain a 'Library of Truth' with pre-vetted security evidence and configurations.
• Provide technical evidence on AWS KMS, logging, IAM and privilege escalations.

Skills

SOC 2

NIST

Cloud security

IAM

CI/CD

GRC tools

Audit coordination

Education

Bachelor's degree in IT/Security

Tools

Vanta

Drata

Jira

KnowBe4

Job description

Snorkel AI seeks a hands-on Technical Compliance Analyst to maintain SOC 2 posture, advance toward CMMC readiness, and bridge compliance with engineering and delivery. You will influence architecture, automate policy enforcement, and enable faster enterprise sales with pristine evidence.

You will partner across IT, Security, Product, and Delivery to bake in compliance by design, translating controls into actionable tasks and driving continuous improvement in security posture.