> Markdown version of [/jobs/ext/2706367-security-engineer](https://www.wearedevelopers.com/jobs/ext/2706367-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Security Engineer - **Company:** OVERSTORY, INC. - **Location:** United States (Remote available) - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Amazon Web Services, Microsoft Azure, Software as a Service, Cloud Computing Security, Cyber Security, Identity and Access Management, Automation of Marketing, Security Information and Event Management, Software Vulnerability Management, Data Logging, Cloud Platform System - **Published:** September 4, 2026 - **Apply:** https://startup.jobs/senior-security-engineer-overstory-7958222 ## About the Role * 5+ years of experience in security engineering, security operations, or a related field * Direct experience with security and compliance frameworks such as SOC 2 and/or ISO 27001, including audit processes * Deep experience with vulnerability management, including tooling, prioritization, and remediation workflows * Fluency working across cloud environments (AWS, GCP, or Azure) and modern SaaS ecosystems * Experience with identity and access management, endpoint security, and IT/security operations * Demonstrated ability to translate security risks into clear, actionable guidance for technical and non-technical stakeholders * Demonstrable experience (or at a minimum a serious interest in) leveraging AI tooling to accelerate business impact. * Strong written communication skills and are comfortable owning documentation and audit artifacts * Demonstrable proactive, pragmatic mindset as well as capacity for balancing security best practices with business needs * Experience working cross-functionally influencing without authority in a remote-first environment Nice To Have * Experience designing or improving SIEM, logging, and alerting pipelines * Familiarity with compliance automation platforms (Drata, Vanta, Tugboat, etc.) * Experience leading or owning SOC 2 / ISO 27001 audits * Background in application or cloud security engineering * Experience mentoring or guiding more junior team members ## Description As our inaugural Senior Security Engineer, you will play a critical role in safeguarding Overstory's systems, data, and reputation. Partnering closely with your manager - the Director of Information Security and Compliance - you will take ownership of our security and compliance posture, and define, implement, and continuously improve our security program. You will lead initiatives across vulnerability management, compliance, and security operations, while acting as a trusted partner to engineering, product, and business teams. This role is ideal for someone who combines hands-on technical expertise with a strategic mindset and enjoys building scalable security practices in a growing company. Time Zone Requirement: Eastern North America (NST, AST, EST) What You'll Do * Own and evolve Overstory's compliance program, ensuring ongoing alignment with SOC 2, ISO 27001, and other relevant frameworks * Drive vulnerability management end-to-end, from detection to remediation, working closely with engineering teams to prioritize and resolve risks efficiently * Design and improve security processes and controls across infrastructure, applications, and internal systems * Lead security input in architecture and engineering decisions, helping teams build secure-by-design systems * Oversee and improve identity and access management, endpoint security, and core IT security practices * Own vendor security and third-party risk management, including assessments, risk evaluation, and mitigation strategies * Lead audit readiness and execution for SOC 2 and ISO 27001, including control design, evidence collection, and auditor coordination * Partner with customer-facing teams to handle security questionnaires and build scalable, high-quality response processes * Contribute to security awareness and culture, mentoring others and raising the security bar across the organization, We sometimes use AI tools to support parts of our hiring process, such as helping us manage applications more efficiently or ensuring job descriptions are clear and inclusive. All hiring decisions are always made by people, not machines. Any data processed by AI is handled securely in line with GDPR and our Privacy Notice. ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Crypto-secure Data Management with In-Database Blockchain](https://www.wearedevelopers.com/videos/632-crypto-secure-data-management-with-in-database-blockchain) - [Developer Tools for Microsoft Azure](https://www.wearedevelopers.com/videos/450-developer-tools-for-microsoft-azure) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company) - [Build Delightful Mobile Experiences with Kotlin, Realm, and Atlas Device Sync](https://www.wearedevelopers.com/videos/694-build-delightful-mobile-experiences-with-kotlin-realm-and-atlas-device-sync) ## Related Articles - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers) - [Navigating the AI Shift](https://www.wearedevelopers.com/magazine/629-navigating-the-ai-shift)