Senior Security Engineer

About the role

As Overstory’s inaugural Senior Security Engineer, you will safeguard the company’s systems, data, and reputation while shaping and continuously improving its security and compliance program.

Key responsibilities

• Own and evolve the compliance program to align with SOC 2, ISO 27001 and related frameworks.
• Drive end‑to‑end vulnerability management, partnering with engineering to prioritize and remediate risks.
• Design and improve security processes across infrastructure, applications and internal systems.
• Provide security input for architecture and engineering decisions, ensuring secure‑by‑design solutions.
• Oversee identity and access management, endpoint security and core IT security practices.
• Manage vendor security and third‑party risk assessments, mitigation and monitoring.
• Lead audit readiness and execution for SOC 2 and ISO 27001, including evidence collection and auditor coordination.
• Support customer‑facing teams with security questionnaires and build scalable response processes.
• Contribute to security awareness, mentor colleagues and raise the overall security posture.

Required profile

• 5+ years of experience in security engineering, security operations or a related field.
• Direct experience with SOC 2 and/or ISO 27001 audit processes.
• Proven track record in vulnerability management, including tooling and remediation workflows.
• Hands‑on experience across cloud platforms (AWS, GCP or Azure) and modern SaaS ecosystems.
• Strong communication skills, able to translate security risks for technical and non‑technical audiences.
• Proactive, pragmatic mindset balancing security best practices with business needs.

Required skills

• Vulnerability management tools and processes
• SOC 2 and ISO 27001 frameworks
• AWS, Google Cloud Platform or Microsoft Azure
• Identity and Access Management (IAM)
• Endpoint security solutions
• SIEM, logging and alerting pipelines
• Compliance automation platforms (e.g., Drata, Vanta, Tugboat)
• AI tooling for security acceleration

What we offer

• Competitive, location‑specific compensation and benefits
• Flexible, autonomous and collaborative remote‑first work environment
• Home office stipend, coworking and ongoing education budgets
• Mission‑driven culture focused on reducing wildfires and addressing climate change