Overstory

Overstory

Overstory uses AI and satellite imagery to prevent wildfires and power outages by analyzing vegetation for electric utilities.

Utilities
11-50
Founded 2018
$25M raised

Description

  • Own and continuously improve Overstory’s compliance program, maintaining alignment with SOC 2, ISO 27001, and related frameworks.
  • Drive end-to-end vulnerability management, including detection, remediation prioritization, and coordination with engineering teams.
  • Design and improve security processes and controls across infrastructure, applications, and internal systems.
  • Provide security input on architecture and engineering decisions to help teams build secure-by-design systems.
  • Oversee identity and access management, endpoint security, and core IT security practices.
  • Own vendor security and third-party risk management, including assessments, risk evaluation, and mitigation planning.
  • Lead audit readiness and execution for SOC 2 and ISO 27001, including evidence collection and auditor coordination.
  • Partner with customer-facing teams to respond to security questionnaires and improve response workflows.
  • Contribute to security awareness and culture by mentoring others and raising the organization’s security standards.

Requirements

  • 5+ years of experience in security engineering, security operations, or a related field.
  • Direct experience with security and compliance frameworks such as SOC 2 and/or ISO 27001, including audit processes.
  • Deep experience with vulnerability management, including tooling, prioritization, and remediation workflows.
  • Experience working across cloud environments such as AWS, GCP, or Azure and modern SaaS ecosystems.
  • Experience with identity and access management, endpoint security, and IT/security operations.
  • Ability to translate security risks into clear, actionable guidance for both technical and non-technical stakeholders.
  • Demonstrable experience or strong interest in using AI tooling to accelerate business impact.
  • Strong written communication skills and comfort owning documentation and audit artifacts.
  • A proactive, pragmatic mindset with the ability to balance security best practices and business needs.
  • Experience influencing cross-functionally in a remote-first environment without formal authority.
  • Experience designing or improving SIEM, logging, and alerting pipelines is a plus.
  • Familiarity with compliance automation platforms such as Drata, Vanta, or Tugboat is a plus.
  • Experience leading or owning SOC 2 / ISO 27001 audits is a plus.
  • Background in application security or cloud security engineering is a plus.
  • Experience mentoring or guiding more junior team members is a plus.
  • Ability to work in Eastern North America time zones (NST, AST, EST).

Benefits

  • Competitive, location-specific compensation and benefits.
  • Flexible, autonomous, and collaborative working environment built on trust.
  • Home office stipend.
  • Coworking budget.
  • Ongoing education budget.
  • Mission-driven work focused on reducing wildfires and supporting climate resilience.
  • Remote work with the option for occasional in-person collaboration.
  • Annual in-person team gathering event.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

IT Security & Compliance Lead (Amsterdam, NLD)

B Lab 51-250 Diversified Consumer Services

B Lab is seeking a full-time IT Security & Compliance Lead in Amsterdam to establish consistent security governance, compliance, and risk management across its consolidating global network.

Cybersecurity Penetration Testing Salesforce
4 hours, 35 minutes ago

IT Security & Compliance Lead (São Paulo, BR)

B Lab 51-250 Diversified Consumer Services

B Lab is seeking an IT Security & Compliance Lead in São Paulo to establish consistent security governance, compliance, risk management, and incident-response practices across its consolidating global nonprofit network.

Cybersecurity Penetration Testing Salesforce
4 hours, 35 minutes ago

Information Security Engineer

Edmentum 1K-5K Diversified Consumer Services

Edmentum is seeking a Remote First Information Security Engineer to protect the systems, data, and learning platforms supporting millions of students while strengthening security operations and compliance.

Agile Penetration Testing
5 hours, 20 minutes ago

Middle+/Senior DevSecOps Engineer | TechCore

Boosta 501-1000 information technology & services

Boosta is hiring a Middle+/Senior DevSecOps Engineer for its service team to secure and support infrastructure and digital projects across the holding.

AWS Azure Bash CI/CD Cloudflare DNS Docker GCP GitHub Actions GitLab CI HashiCorp Vault Helm JavaScript Jenkins Kubernetes Python SIEM SOC SonarQube Terraform TLS WAF
1 day, 4 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers