Security Engineer

As a Security Engineer you’ll play a key role in safeguarding Overstory’s systems and ensuring trust with our partners and customers. Together with our Director of Information Security and Compliance you will maintain our compliance platform, strengthen our vulnerability management process, support end-users with IT needs, and help us prepare for audits and security reviews. This role is ideal for someone early in their security career who’s eager to grow into a broader role spanning security, compliance, and IT. You will maintain and improve Overstory’s compliance platform in its support of SOC 2, ISO27001 and other frameworks. Monitor and track vulnerabilities across infrastructure and applications, coordinating with and assisting engineering teams for timely remediation. Provide limited IT support for onboarding, offboarding, access management, and endpoint security. Conduct vendor security reviews to manage third-party risk. Support SOC 2 and ISO27001 audit compliance, including evidence gathering and control monitoring. Assist with customer security questionnaires and maintain a knowledge base of standard responses.