Senior Security Engineer — Remote-First, Compliance & Risk

Overstory; Svezia; Remoto; SEK 1.100.000 - 1.600.000; Tempo pieno

Descrizione del lavoro

Overstory is seeking its inaugural Senior Security Engineer to own and advance our security and compliance program. You’ll partner with the Director of Information Security and Compliance to define controls, drive risk reduction, and build scalable security practices across the company.

You will lead vulnerability management, audits for SOC 2 and ISO 27001, IAM and endpoint security, and incident readiness, while influencing architecture and product teams in a remote-first environment.

Competenze

• 5+ years of experience in security engineering, security operations, or related field.
• Direct experience with SOC 2 and ISO 27001 audits.
• Deep vulnerability management experience, with tooling and remediation workflows.
• Fluency across cloud environments (AWS, GCP, or Azure) and modern SaaS ecosystems.
• Experience with identity and access management, endpoint security, and IT/security operations.
• Ability to translate security risks into clear, actionable guidance for technical and non-technical stakeholders.
• Demonstrable interest in leveraging AI tooling to accelerate business impact.
• Strong written communication and documentation skills.
• Experience working in a remote-first environment with cross-functional teams.

Mansioni

• Own and evolve Overstory’s compliance program with SOC 2, ISO 27001 and other frameworks.
• Drive end-to-end vulnerability management with engineering prioritization.
• Design and improve security processes across infrastructure, apps, and internal systems.
• Lead security input in architecture and engineering decisions for secure-by-design systems.
• Oversee IAM, endpoint security, and core IT security practices.
• Own vendor security and third-party risk management, including assessments and mitigations.
• Lead audit readiness and execution for SOC 2 and ISO 27001.
• Coordinate security questionnaires with customer-facing teams and build scalable response processes.
• Mentor others and raise the security bar across the organization.

Conoscenze

Security engineering

Vulnerability management

Security operations

Cloud security

IAM

Audit readiness

Security documentation

Cross-functional collaboration

AI tooling awareness

Strumenti

Drata

Vanta

Tugboat

Descrizione del lavoro

Overstory is seeking its inaugural Senior Security Engineer to own and advance our security and compliance program. You’ll partner with the Director of Information Security and Compliance to define controls, drive risk reduction, and build scalable security practices across the company.

You will lead vulnerability management, audits for SOC 2 and ISO 27001, IAM and endpoint security, and incident readiness, while influencing architecture and product teams in a remote-first environment.