Senior Security Engineer

Summary

As Overstory's inaugural Senior Security Engineer, you will own the company's security and compliance posture, leading initiatives across vulnerability management, compliance frameworks (SOC 2, ISO 27001), and security operations. You'll design and improve security controls across infrastructure and applications, manage identity and access, oversee vendor risk, and lead audit readiness while partnering with engineering and business teams to build secure-by-design systems. The role requires 5+ years in security engineering or operations, direct experience with SOC 2 and ISO 27001 audits, deep vulnerability management expertise, and fluency across AWS, GCP, or Azure cloud environments. You'll balance technical rigor with pragmatic business judgment, translating security risks into actionable guidance for technical and non-technical stakeholders.