Senior Security Engineer - Compliance, Secure Design, Remote

Overstory; Netherlands; Remote; EUR 90,000 - 140,000; Full time

Benefits offered by this job

Home office stipend

Coworking budget

Ongoing education budget

Flexible work environment

Job summary

Overstory is seeking its inaugural Senior Security Engineer to own and evolve the security program, partnering with the Director of Information Security and Compliance to safeguard systems, data, and reputation.

You will drive vulnerability management, audits (SOC 2, ISO 27001), IAM and endpoint security, and collaborate with engineering, product, and business teams to build secure, scalable practices in a remote-first, international environment.

Qualifications

• 5+ years of experience in security engineering, security operations, or a related field.
• Direct experience with SOC 2 and ISO 27001, including audit processes.
• Deep experience with vulnerability management, tooling, prioritization, and remediation workflows.
• Fluency across cloud environments (AWS, GCP, or Azure) and modern SaaS ecosystems.
• Experience with identity and access management, endpoint security, and IT/security operations.
• Ability to translate security risks into clear, actionable guidance for technical and non-technical stakeholders.
• Interest in leveraging AI tooling to accelerate business impact.
• Strong written communication skills and comfort with documentation and audit artifacts.
• Demonstrated proactive, pragmatic mindset and balance of security with business needs.

Responsibilities

• Own and evolve Overstory’s compliance program, ensuring alignment with SOC 2, ISO 27001, and other frameworks.
• Drive vulnerability management end-to-end with engineering teams to prioritize and remediate risks.
• Design and improve security processes across infrastructure, applications, and internal systems.
• Lead security input in architecture and engineering decisions for secure-by-design systems.
• Oversee identity and access management, endpoint security, and core IT security practices.
• Own vendor security and third-party risk assessments, evaluation, and mitigation strategies.
• Lead audit readiness and execution for SOC 2 and ISO 27001, including evidence collection and auditor coordination.
• Partner with customer-facing teams to handle security questionnaires and scalable responses.
• Contribute to security awareness and culture, mentoring others, and raising security bar.

Skills

Security engineering

Vulnerability management

Cloud security

Audit readiness

Security governance

Security awareness

Tools

Drata

Vanta

Tugboat

SIEM

Job description

Overstory is seeking its inaugural Senior Security Engineer to own and evolve the security program, partnering with the Director of Information Security and Compliance to safeguard systems, data, and reputation.

You will drive vulnerability management, audits (SOC 2, ISO 27001), IAM and endpoint security, and collaborate with engineering, product, and business teams to build secure, scalable practices in a remote-first, international environment.