Senior Security Engineer & Compliance Lead

sofar ocean • San Francisco Bay Area

Remote Visa Sponsorship

Apply Now

AI Summary

Lead Sofar Ocean’s corporate security and identity infrastructure, designing and implementing security controls, compliance programs, and customer trust initiatives. Oversee identity management, endpoint security, SIEM operations, and SOC 2 compliance while collaborating with vendors and auditors. Requires 5+ years in security engineering, hands-on expertise in Google Workspace, SSO/SCIM, MDM, and EDR, with a strong compliance background.

Key Highlights

Own and lead corporate security, identity infrastructure, and compliance programs for a fast-growing startup (~100 employees)

Hands-on administration of Google Workspace, SSO/SCIM, MDM, and EDR tooling with automation in Python

Drive SOC 2 compliance, vendor security reviews, and customer trust initiatives with clear, defensible documentation

Key Responsibilities

Own and administer Google Workspace as the identity provider, implementing SSO and SCIM provisioning across SaaS tools

Automate joiner/mover/leaver processes and conduct periodic access reviews for identity and access management

Manage device management (MDM) and endpoint detection/response (EDR), including device compliance policies

Tune and triage SIEM detections, track vulnerability remediation (Dependabot, pen test results), and maintain incident response plans

Lead day-to-day SOC 2 compliance efforts, including policy maintenance, compliance platform operations, and audit evidence collection

Oversee vendor security reviews, subprocessor assessments, and customer security questionnaire responses

Collaborate with managed IT providers, security vendors, contractors, and auditors to ensure security best practices

Searching for Cyber Security roles that provide visa sponsorship? Connect with international employers through Cyber Security Jobs with Visa Sponsorship opportunities actively seeking talented professionals.

Technical Skills Required

Google Workspace Identity and Access Management (IAM) Security Compliance (SOC 2)

Benefits & Perks

Medical, dental, and vision coverage

401(k) retirement plan

Flexible paid time off (PTO)

Learning and development stipend

$150,000–$200,000 base salary (plus equity)

Visa sponsorship available

Explore our comprehensive directory of visa sponsorship jobs from employers worldwide who are ready to sponsor talented international professionals.

Nice to Have

Experience with Vanta or Drata

AWS CloudFormation

Auth0

SIEM detection engineering

Job Description

Sofar Ocean is building the world's largest real-time ocean sensor network. Our Spotter buoys collect ocean data across the globe, and our software, including Wayfinder for voyage optimization, turns that data into decisions for commercial shipping, government, and defense customers. We're a team of about 100 based at Pier 28 in San Francisco, and we're growing fast.You’ll own Sofar’s corporate security and identity infrastructure and lead our security compliance program. You’ll turn security priorities into working controls, and be the internal point person for customer security reviews. Helpdesk and facilities IT are handled by our managed IT partner, whom you’ll work alongside.

Want the full job description? Read the complete details on LinkedIn, the original posting.

Continue on LinkedIn

This is a short excerpt. All rights to the full description belong to its original publisher.