Security & IT Engineer — IAM, SOC 2, Incident Response

Sofar Ocean; San Francisco (CA); Hybrid; USD 150,000 - 200,000; Full time

Benefits offered by this job

Medical, Dental, Vision coverage

401(k)

Flexible PTO

Learning & development stipend

Job summary

Sofar Ocean is seeking a security leader to own corporate security and identity infrastructure, driving the compliance program and customer security reviews. You will partner with a managed IT provider for helpdesk and facilities while shaping security control implementations.

You will manage Google Workspace, SSO/SCIM, MDM/EDR, and AWS IAM, and you’ll lead SOC 2/ISO 27001 readiness, incident response, and vendor oversight. Remote-friendly, with SF-based HQ options.

Qualifications

• 5+ years in IT systems, corporate security, or security engineering
• Hands-on administration of Google Workspace and an SSO/SCIM stack, plus MDM and EDR tooling
• Working knowledge of AWS IAM. Scripting ability in Python or similar for automation
• Has been through at least one SOC 2 or ISO 27001 audit from the inside
• Writes clearly and precisely. You prefer a defensible claim to an optimistic one.

Responsibilities

• Own identity and access management and run joiner/mover/leaver processes
• Own device management (MDM, EDR) and endpoint security
• Tune and triage SIEM detections; track vulnerability remediation
• Maintain and exercise incident response plan
• Run day-to-day SOC 2 and other compliance tasks
• Respond to customer security questionnaires and vendor reviews

Skills

Identity and access governance

Security operations

Incident response planning

SOC 2 / ISO 27001 familiarity

Python scripting

Vendor management

Tools

Google Workspace

SSO/SCIM

MDM

EDR

AWS IAM

SIEM

Job description

Sofar Ocean is seeking a security leader to own corporate security and identity infrastructure, driving the compliance program and customer security reviews. You will partner with a managed IT provider for helpdesk and facilities while shaping security control implementations.

You will manage Google Workspace, SSO/SCIM, MDM/EDR, and AWS IAM, and you’ll lead SOC 2/ISO 27001 readiness, incident response, and vendor oversight. Remote-friendly, with SF-based HQ options.