Overstory Senior Security Engineer Jobs USA 2026 | Remote

Help Overstory protect climate technology as a remote Senior Security Engineer in the U.S. or Canada, with scope to develop security-program leadership. Exploring security engineer jobs USA 2026? Review the eligibility and preparation guide below before applying to this remote cybersecurity opening. Source checked: October 6, 2026. Aptub independently summarizes the employer's vacancy. The header uses a generic cybersecurity illustration, not Overstory's corporate logo. Quick Info: Job at a Glance

• Organization: Overstory
• Position title: Senior Security Engineer
• Work location / mode: Remote: United States and Canada; Eastern North America (NST, AST, EST)
• Compensation: Numeric range not published
• Experience: 5+ years
• Education: No specific degree stated
• Application deadline / schedule: No closing date published; verify availability on the employer's page
• Employment classification: Not explicitly stated; confirm with the recruiter

The Role: Senior Security Engineer Overstory uses satellite imagery and AI to help utilities manage vegetation risk. This role combines hands‐on protection with security‐program ownership.

• Coordinate SOC 2 and ISO 27001 compliance and audits.
• Manage vulnerability detection, prioritization and remediation.
• Improve infrastructure, application, identity and endpoint controls.
• Assess vendor risk and support customer security questionnaires.
• Guide engineering decisions and security awareness.

Required Qualifications & Competencies Five-plus years in security engineering, operations or related work; vulnerability‐management and audit experience; AWS, GCP or Azure familiarity; IAM, endpoint and SaaS security skills; clear documentation, collaboration and pragmatic risk communication. AI‐tooling experience or serious interest is requested. Helpful extras: SIEM/logging, Drata, Vanta or Tugboat, audit ownership, application/cloud security and mentoring. No specific degree or certification is listed. Benefits & Workplace Culture Published support includes home‐office, coworking and education budgets, flexible work and location‐specific benefits. Health coverage, retirement contributions and leave allowances are not itemized; confirm these directly. Editor's Take: Why This Role Could Be a Career Catalyst Consider this opportunity if you want to connect technical security work with business decisions. Before accepting any role with a broad remit, ask how priorities are set, who approves risk exceptions and what support is available when several urgent issues compete. Ownership is valuable when expectations, staffing and authority are clear. Make your resume evidence‐led. Replace a long tool list with two or three short examples explaining the system involved, your individual contribution and the measurable result. If you reduced an exposure window, describe the baseline and how you measured improvement. If your work supported an audit, distinguish gathering evidence from designing or operating the control. Use only figures you can defend. Prepare a sanitized case study. Choose a vulnerability you handled and explain how you assessed exploitability, identified the owner, agreed a remediation date and checked the fix. A simple timeline can demonstrate judgment more clearly than an unsupported claim that you "improved security." Remove client names, secrets, internal addresses and confidential architecture from interview materials. Practice communicating trade‐offs. Explain the same risk twice: once for an engineer who needs implementation detail and once for a business owner who needs a decision. Be ready to discuss what you would do when a critical dependency cannot be patched immediately. Describe how you would document temporary controls, ownership and a review date. Discuss remote working conditions early. Ask about core collaboration hours, incident‐response coverage, on‐call compensation, equipment and travel expectations. A remote label does not establish schedule freedom. International readers should assess each vacancy's country restrictions separately instead of treating a globally distributed employer as permission to work from any country. Evaluate the complete offer. Request the pay band for your location, currency, any variable pay, benefit eligibility and leave policy before making a comparison. Do not substitute an estimated market salary for an actual offer. Ask what success should look like after 30, 60 and 90 days and how performance will be assessed. Frequently Asked Questions Is this remote cybersecurity job open worldwide? No. This vacancy is for the United States and Canada, with Eastern North America time‐zone availability (NST, AST or EST). What is the application deadline? No closing date is published. Check the employer's application page before preparing your submission. What salary does Overstory offer? A numeric salary range is not published. Ask the recruiter about the range and location‐specific benefits. Are a degree or security certifications mandatory? The posting does not specify a mandatory degree or named certification. It requests at least five years of relevant experience. Does this role offer visa sponsorship? No. The application form states that sponsorship is unavailable for this position. Source: Overstory's employer‐hosted vacancy and application form. Employer details may change; the official page takes precedence.