Overstory

Overstory

Overstory uses AI and satellite imagery to prevent wildfires and power outages by analyzing vegetation for electric utilities.

Utilities
11-50
Founded 2018
$25M raised

Description

  • Own and continuously improve Overstory’s compliance program, maintaining alignment with SOC 2, ISO 27001, and related frameworks.
  • Drive end-to-end vulnerability management, including detection, remediation prioritization, and coordination with engineering teams.
  • Design and improve security processes and controls across infrastructure, applications, and internal systems.
  • Provide security input on architecture and engineering decisions to help teams build secure-by-design systems.
  • Oversee identity and access management, endpoint security, and core IT security practices.
  • Own vendor security and third-party risk management, including assessments, risk evaluation, and mitigation planning.
  • Lead audit readiness and execution for SOC 2 and ISO 27001, including evidence collection and auditor coordination.
  • Partner with customer-facing teams to respond to security questionnaires and improve response workflows.
  • Contribute to security awareness and culture by mentoring others and raising the organization’s security standards.

Requirements

  • 5+ years of experience in security engineering, security operations, or a related field.
  • Direct experience with security and compliance frameworks such as SOC 2 and/or ISO 27001, including audit processes.
  • Deep experience with vulnerability management, including tooling, prioritization, and remediation workflows.
  • Experience working across cloud environments such as AWS, GCP, or Azure and modern SaaS ecosystems.
  • Experience with identity and access management, endpoint security, and IT/security operations.
  • Ability to translate security risks into clear, actionable guidance for both technical and non-technical stakeholders.
  • Demonstrable experience or strong interest in using AI tooling to accelerate business impact.
  • Strong written communication skills and comfort owning documentation and audit artifacts.
  • A proactive, pragmatic mindset with the ability to balance security best practices and business needs.
  • Experience influencing cross-functionally in a remote-first environment without formal authority.
  • Experience designing or improving SIEM, logging, and alerting pipelines is a plus.
  • Familiarity with compliance automation platforms such as Drata, Vanta, or Tugboat is a plus.
  • Experience leading or owning SOC 2 / ISO 27001 audits is a plus.
  • Background in application security or cloud security engineering is a plus.
  • Experience mentoring or guiding more junior team members is a plus.
  • Ability to work in Eastern North America time zones (NST, AST, EST).

Benefits

  • Competitive, location-specific compensation and benefits.
  • Flexible, autonomous, and collaborative working environment built on trust.
  • Home office stipend.
  • Coworking budget.
  • Ongoing education budget.
  • Mission-driven work focused on reducing wildfires and supporting climate resilience.
  • Remote work with the option for occasional in-person collaboration.
  • Annual in-person team gathering event.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Senior Security Operations Engineer I

Samsara 1K-5K IT Services

Samsara is hiring a Security Operations professional to lead incident response, digital forensic investigations, and security operations support for a global platform serving physical industries.

AWS GCP Linux macOS Python SIEM
2 hours, 43 minutes ago

Senior Security Engineer

Tekion 1K-5K IT Services

Tekion is seeking a Security Engineer to lead security engineering for its cloud-native automotive platform, helping secure critical systems while partnering with cross-functional teams to strengthen architecture, detection, and risk mitigation.

AWS Azure Bash Cybersecurity GCP Python SIEM Terraform
2 hours, 43 minutes ago

Lead Domain Engineering Specialist

Veeam Software 1K-5K Internet Software & Services

Veeam is hiring a Lead Domain Engineering Specialist to partner with customer success and sales teams on security, data, and AI risk conversations that improve customer outcomes and uncover expansion opportunities across the Veeam Data Platform.

Cybersecurity
2 hours, 43 minutes ago

Information Security Engineer (Cloud Security Engineer) - 1 Year Contract

numeris.ca 251-1K Professional Services

Numeris is seeking a Cloud Security Engineer to implement and operate its Microsoft security ecosystem, with a focus on Microsoft 365 E5 security, cloud security posture, and security operations.

AWS Azure Cybersecurity PowerShell Python
2 hours, 58 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers