Senior Security Engineer

The climate crisis is the defining challenge of our time—but it’s also the greatest opportunity for innovation, and a challenge we’re proud to take on. At Overstory, we’re harnessing cutting-edge technology to enable a resilient electrical grid that keeps communities thriving as our world changes. The grid is the backbone of life as we know it. It powers hospitals, keeps food fresh, and ensures communities stay connected. But extreme weather, aging infrastructure, and growing wildfire risks are putting this critical system under pressure. All of this combined makes the electric utility industry the greatest opportunity for tackling climate change. One of the leading causes of catastrophic wildfires and power outages? Trees and brush coming into contact with power lines. That’s where we help. At Overstory, we use AI and advanced satellite imagery to pinpoint and prioritize vegetation risks before they materialize. By giving utilities critical analysis on those risks, we’re helping prevent outages, reduce wildfire risks, and accelerate the transition to a safer, more resilient grid. Our team spans the Americas and Europe, and we work with utility partners across the Americas and beyond. We’re outdoor enthusiasts, musicians, artists, athletes, parents, and adventurers. What unites us is a passion for solving complex problems, a commitment to climate action, and the belief that technology should be a force for good. Join us to help us build a more resilient world together. Role & Team As our inaugural Senior Security Engineer, you will play a critical role in safeguarding Overstory’s systems, data, and reputation. Partnering closely with your manager - the Director of Information Security and Compliance - you will take ownership of our security and compliance posture, and define, implement, and continuously improve our security program. You will lead initiatives across vulnerability management, compliance, and security operations, while acting as a trusted partner to engineering, product, and business teams. This role is ideal for someone who combines hands-on technical expertise with a strategic mindset and enjoys building scalable security practices in a growing company. Time Zone Requirement: Eastern North America (NST, AST, EST) What You’ll Do Own and evolve Overstory’s compliance program, ensuring ongoing alignment with SOC 2, ISO 27001, and other relevant frameworks Drive vulnerability management end-to-end, from detection to remediation, working closely with engineering teams to prioritize and resolve risks efficiently Design and improve security processes and controls across infrastructure, applications, and internal systems Lead security input in architecture and engineering decisions, helping teams build secure-by-design systems Oversee and improve identity and access management, endpoint security, and core IT security practices Own vendor security and third-party risk management, including assessments, risk evaluation, and mitigation strategies Lead audit readiness and execution for SOC 2 and ISO 27001, including control design, evidence collection, and auditor coordination Partner with customer-facing teams to handle security questionnaires and build scalable, high-quality response processes Contribute to security awareness and culture, mentoring others and raising the security bar across the organization Skills & Experience 5+ years of experience in security engineering, security operations, or a related field Direct experience with security and compliance frameworks such as SOC 2 and/or ISO 27001, including audit processes Deep experience with vulnerability management, including tooling, prioritization, and remediation workflows Fluency working across cloud environments (AWS, GCP, or Azure) and modern SaaS ecosystems Experience with identity and access management, endpoint security, and IT/security operations Demonstrated ability to translate security risks into clear, actionable guidance for technical and non-techni