Overstory
Senior Security Engineer
Remote: United States | Canada · Senior
Sponsorship not specifiedDetected 74 days ago
AWSGCPAzureCloud PlatformsCybersecuritySIEMSOC OperationsComplianceDesign SystemsCommunicationMentoring
About the role
- The climate crisis is the defining challenge of our time-but it's also the greatest opportunity for innovation, and a challenge we're proud to take on.
- The grid is the backbone of life as we know it.
- It powers hospitals, keeps food fresh, and ensures communities stay connected.
Responsibilities
- Own and evolve Overstory's compliance program, ensuring ongoing alignment with SOC 2, ISO 27001, and other relevant frameworks
- Drive vulnerability management end-to-end, from detection to remediation, working closely with engineering teams to prioritize and resolve risks efficiently
- Design and improve security processes and controls across infrastructure, applications, and internal systems
- Lead security input in architecture and engineering decisions, helping teams build secure-by-design systems
- Own vendor security and third-party risk management, including assessments, risk evaluation, and mitigation strategies
- Lead audit readiness and execution for SOC 2 and ISO 27001, including control design, evidence collection, and auditor coordination
- Partner with customer-facing teams to handle security questionnaires and build scalable, high-quality response processes
- We are responsible for creating and maintaining a culture where everyone - regardless of background - has a voice in building a sustainable future.
- We sometimes use AI tools to support parts of our hiring process, such as helping us manage applications more efficiently or ensuring job descriptions are clear and inclusive.
Requirements
- 5+ years of experience in security engineering, security operations, or a related field
- Direct experience with security and compliance frameworks such as SOC 2 and/or ISO 27001, including audit processes
- Deep experience with vulnerability management, including tooling, prioritization, and remediation workflows
- Experience with identity and access management, endpoint security, and IT/security operations
Nice to have
- Experience designing or improving SIEM, logging, and alerting pipelines
- Familiarity with compliance automation platforms (Drata, Vanta, Tugboat, etc.)
- Experience leading or owning SOC 2 / ISO 27001 audits
- Background in application or cloud security engineering
- Experience mentoring or guiding more junior team members
- A company culture that genuinely embodies each of our core values
Compensation
- Competitive, location-specific compensation and benefits
Benefits
- Flexible, autonomous and collaborative working environment rooted in trust - we build our work days around our lives, not the other way around
- Home office stipend, coworking and ongoing education budgets
- Competitive, location-specific compensation and benefits
Company info
- At Overstory, we're harnessing cutting-edge technology to enable a resilient electrical grid that keeps communities thriving as our world changes.
- At Overstory, we use AI and advanced satellite imagery to pinpoint and prioritize vegetation risks before they materialize.
- To be part of truly mission-driven work that reduces wildfires, protects earth's natural resources and helps solve our climate crisis
- We are a group of 100 people from all over the world.
Apply directly at Overstory →Create a free account for alerts like thisView Overstory immigration profile
This listing is sourced directly from Overstory's careers page and normalized into a canonical job model.