Security & IT Engineer

Join Sofar, a company dedicated to ocean science, climate, and technology. As a Security & IT Engineer, you will be responsible for managing corporate security and identity infrastructure, leading the security compliance program, and serving as the internal point person for customer security reviews. You will work alongside our managed IT partner and have a significant impact on the company's security posture.

• Posséder l'infrastructure de sécurité et d'identité de l'entreprise, et diriger le programme de conformité en matière de sécurité.
• Gérer l'administration de Google Workspace en tant que fournisseur d'identité, déployer SSO et SCIM, et automatiser les processus d'intégration.
• Gérer les opérations de sécurité, ajuster et trier les détections SIEM, et suivre la remédiation des vulnérabilités.

• Hands-on administration of Google Workspace and an SSO/SCIM stack, plus MDM and EDR tooling
• A note on applying: We mean it when we say we want the strongest people — not the most credentialed ones. If you're excited about this work but don't check every box, please apply anyway. Research consistently shows that underrepresented candidates are more likely to self-select out, and that's a loss for everyone. Sofar operates at the intersection of ocean science, climate, and technology — the problems we're solving are consequential, and the perspectives we bring to them matter. We're actively working to build a team that reflects that
• Writes clearly and precisely. You prefer a defensible claim to an optimistic one
• Working knowledge of AWS IAM. Scripting ability in Python or similar for automation
• Has been through at least one SOC 2 or ISO 27001 audit from the inside
• A clear, well-reasoned point of view on how a ~100-person startup should approach security, including where to invest early, where to accept risk, and how to sequence compliance work. You can defend that view and adjust it when the context changes
• 5+ years in IT systems, corporate security, or security engineering, ideally at a startup
• Experience with SIEM detection engineering
• Experience Vanta or Drata, AWS CloudFormation, Auth0