Remote Senior Security & Compliance Engineer

Overstory; San Diego (CA); Remote; USD 170,000 - 210,000; Full time

Benefits offered by this job

Home office stipend

Coworking budget

Ongoing education budgets

Flexible working environment

Mission-driven work

Job summary

Overstory is seeking its inaugural Senior Security Engineer to own the security program, protect systems and data, and partner with the Director of Information Security and Compliance. You will lead vulnerability management, compliance activities, cloud security, and vendor risk while building scalable security practices in a growing company.

This role emphasizes collaboration across engineering, product, and business teams, with a remote-first culture and a focus on security awareness and

Qualifications

• 5+ years of experience in security engineering, security operations, or a related field.
• Direct experience with SOC 2 and ISO 27001, including audit processes.
• Deep experience with vulnerability management, tooling, prioritization, and remediation workflows.
• Fluency across cloud environments (AWS, GCP, or Azure) and modern SaaS ecosystems.
• Experience with identity and access management, endpoint security, and IT/security operations.
• Ability to translate security risks into clear, actionable guidance for technical and non-technical stakeholders.
• Interest and/or demonstrable use of AI tooling to accelerate business impact.
• Strong written communication and comfortable owning documentation and audit artifacts.
• Proactive, pragmatic mindset balancing security best practices with business needs.
• Experience working cross-functionally influencing without authority in a remote-first environment.

Responsibilities

• Own and evolve Overstory’s compliance program, ensuring ongoing alignment with SOC 2, ISO 27001, and other relevant frameworks.
• Drive vulnerability management end-to-end, from detection to remediation, working closely with engineering teams.
• Design and improve security processes and controls across infrastructure, applications, and internal systems.
• Lead security input in architecture and engineering decisions, helping teams build secure-by-design systems.
• Oversee and improve identity and access management, endpoint security, and core IT security practices.
• Own vendor security and third-party risk management, including assessments, risk evaluation, and mitigation strategies.
• Lead audit readiness and execution for SOC 2 and ISO 27001, including control design, evidence collection, and auditor coordination.
• Partner with customer-facing teams to handle security questionnaires and build scalable, high-quality response processes.
• Contribute to security awareness and culture, mentoring others and raising the security bar across the organization.

Skills

Security engineering

Vulnerability management

SOC 2 / ISO 27001

Cloud security (AWS/GCP/Azure)

IAM / Endpoint security

Audit readiness

Risk communication

AI tooling in security

Cross-functional collaboration

Documentation / writing

Tools

Drata

Vanta

Tugboat

Job description

Overstory is seeking its inaugural Senior Security Engineer to own the security program, protect systems and data, and partner with the Director of Information Security and Compliance. You will lead vulnerability management, compliance activities, cloud security, and vendor risk while building scalable security practices in a growing company.

This role emphasizes collaboration across engineering, product, and business teams, with a remote-first culture and a focus on security awareness and