Oneleet

Assess client security postures and develop customized security programs based on industry frameworks, acting as liaison between clients, auditors, and engineering teams to implement controls. | 4+ years in information security or audit with deep knowledge of SOC 2 and ISO 27001 frameworks and technical account management experience. | About Oneleet Oneleet is one of the fastest-growing security and compliance platforms in history. We are on a mission to change the compliance and security industry by making cybersecurity and compliance effective, easy, and painless. We provide a platform that helps companies build, manage, and monitor their cybersecurity programs and achieve compliance standards such as SOC 2 and ISO 27001 efficiently, without cutting corners. Having just raised a $33 million Series A, we are rapidly growing in customers and employees. Our team has decades of experience in security and compliance. Join our team of opinionated rebels and help us build a category-defining company reshaping the broken and fragmented compliance and cybersecurity industry. Who we’re looking for: We value passionate self-starters with a growth mindset and a bias for action and personal accountability. If you love solving hard problems, thrive in ambiguity, and want to make a real impact, you’ll fit right in. We’re especially drawn to: Rebels with a cause — frustrated with the status quo and eager to disrupt it. Opinionated (but not obstinate) builders — decisive yet collaborative, who help us move fast. Clear communicators — who own their ideas and follow through. Our mission is simple: make effective cybersecurity painless. We believe cybersecurity should empower, not burden. This belief unites our team and drives every decision we make. If you’re ready to challenge the status quo and help shape the future of cybersecurity, we’d love to meet you. The Security Program Manager is part vCISO & part account manager. You will work with our customers from the start to assess their current security/compliance framework, provide guidance and recommendations for improvements, and work with clients to implement recommendations. You're passionate about security, and enjoy sharing your knowledge with not only our customers but your colleagues. Key Responsibilities Conduct initial consultation calls with new clients to assess their current security posture, infrastructure stack, compliance requirements and overall objectives. Provide guidance and recommendations for improving client security posture Develop high-level security programs consisting of technical, operational and administrative controls based on industry frameworks and client needs. Collaborate with clients to customize and refine the security program to match their specific use cases. Communicate with clients and stakeholders to ensure smooth and efficient security program creation Liaise with auditors to ensure clients' security programs align with auditors' expectations Maintain expertise across a range of security frameworks, control types, and technologies including NIST, SOC2, ISO27001, CMMC, AWS, Azure, GCP, Kubernetes, Docker, Terraform, and more. Provide feedback to Oneleet's engineering team to inform development of integrations, solutions, and products that deliver on client needs. Be highly technical, learn new technologies quickly, and translate security concepts into implementations. Partner with internal teams to translate security programs into implementations consisting of policies, procedures, configurations and software integrations. Requirements Security/Compliance Experience 4+ years in a role involving information security, compliance, or audit (security operations, GRC, vCISO, security advisory, IT/Compliance auditing, or a security-adjacent customer success/IT support role). You’ll need to understand security and operations well enough that compliance becomes the natural byproduct of genuine security, not just checking boxes against the checklist. You should know why the box exists. Working and broad knowledge of security best practices, major compliance frameworks (SOC 2, ISO 27001, HIPAA, GDPR, PCI), and how controls map to real infrastructure and operations. Audit-side insight is particularly relevant. Account Management Experience Technical Account Management experience, or client facing or stakeholder facing experience with strong project management instincts. This is a high-volume, high-interruption, relationship-oriented role that requires you to translate between technical and non-technical people. Startup and business fluency matters, whether gained internally or in consulting with startups, for helping companies find a compliance path that truly fits where they are today. Ability to understand client infrastructure and map security controls to meet compliance goals and the bigger picture of holistic security and compliance. Strong analytical skills to evaluate environments and determine appropriate safeguards. Excellent verbal and written communication skills. Self-driven with the ability to work independently, comfortable with ambiguity, and able to adapt approach client-by-client in a fast-moving startup environment. Willingness to go the extra mile to meet tight deadlines and deliver results. Bonus Experience One or more of the following certifications: CISA, CISSP, CISM Exposure to a “Lead Auditor” scope (cross-framework, whole-program view) rather than a single specialty area Prior experience in customer success, IT support, or technical support background (useful for pace/responsiveness this role demands) Why Oneleet? At Oneleet, you’ll join a tight-knit team of rebels redefining the cybersecurity industry. We move fast, own our work, and challenge outdated models to make security effortless and effective for companies. Here’s what makes us special: We value impact over titles, autonomy over micromanagement, and clarity over jargon. You’ll tackle meaningful, hard problems with real-world consequences. You’ll work with smart, kind, and ambitious teammates who lift each other up. Perks & Benefits Comprehensive health & wellness benefits 20 days PTO per year, plus 8 floating holiday Remote work culture Team off-sites in stunning places (Amsterdam, Italy, etc). Competitive compensation & equity We hire globally and compensate competitively within each market using geographic pay bands. The range for this role reflects a US national baseline. Offers for candidates in higher cost-of-labor markets (e.g., San Francisco, New York, Zurich) may fall at or above the top of the posted range, while offers in other markets are benchmarked to local standards and are lower. Within any range, individual compensation is determined by work location, skills and experience demonstrated through the interview process, and relevant education or training. This posting reflects base salary only and does not include equity or benefits. Remote-First & Global Hiring We’re a remote-first company and hire globally in regions where we can legally engage talent directly or via our employer-of-record (EOR) partner. If you’re based outside the U.S., we’ll explore the most compliant hiring arrangement for your location. We make hiring decisions based on merit, skills, and potential regardless of location. U.S. Hiring & E-Verify For U.S.-based candidates, Oneleet participates in E-Verify to confirm employment eligibility, in accordance with federal regulations. We are an equal opportunity employer. We do not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other characteristic protected by applicable law. This company uses automated technology, including AI-assisted tools, to assist in reviewing applications, assessing candidate qualifications, and detecting fraudulent submissions. These tools analyze application data and identity signals to support, but not replace, human hiring decisions. All final hiring decisions are made by a human reviewer. Candidates who require accommodation or who wish to request information about how these tools are used may contact recruiting@oneleet.com. This process is conducted in compliance with applicable federal, state, and local laws.

Build and maintain React/TypeScript UI components and dashboards for a cybersecurity platform. | 5+ years frontend experience with React and TypeScript, strong UI design skills, and startup experience. | About Oneleet Oneleet is one of the fastest-growing security and compliance platforms in history. We are on a mission to change the compliance and security industry by making cybersecurity and compliance effective, easy, and painless. We provide a platform that helps companies build, manage, and monitor their cybersecurity programs and achieve compliance standards such as SOC 2 and ISO 27001 efficiently, without cutting corners. Having just raised a $33 million Series A , we are rapidly growing in customers and employees. Our team has decades of experience in security and compliance. Join our team of opinionated rebels and help us build a category-defining company reshaping the broken and fragmented compliance and cybersecurity industry. Who we’re looking for: We value passionate self-starters with a growth mindset and a bias for action and personal accountability. If you love solving hard problems, thrive in ambiguity, and want to make a real impact, you’ll fit right in. We’re especially drawn to: Rebels with a cause — frustrated with the status quo and eager to disrupt it. Opinionated (but not obstinate) builders — decisive yet collaborative, who help us move fast. Clear communicators — who own their ideas and follow through. Our mission is simple: make effective cybersecurity painless. We believe cybersecurity should empower, not burden. This belief unites our team and drives every decision we make. If you’re ready to challenge the status quo and help shape the future of cybersecurity, we’d love to meet you. As a Frontend Engineer at Oneleet, you'll own the user experience layer of our cybersecurity platform. You'll build the dashboards, workflows, and data visualizations that security teams use day-to-day — turning complex underlying data into clear, actionable interfaces. This is a hands-on, React-focused role at a Series A startup. You'll partner closely with our Product Designer and PM on a mock-up-first workflow — taking mock-ups and shipping them quickly without losing design fidelity. You'll extend our existing component library, push back when patterns don't hold up, and work directly with customers to validate what you ship. Working primarily in TypeScript and React, you'll help us ship a polished product against named competitors. Key Responsibilities: Build UI components and full pages in React/TypeScript across the platform Extend and maintain our existing component library, ensuring consistency across the product Implement complex triage, filtering, and workflow flows that handle high-volume data Build data visualizations for dashboards, posture views, and reporting Optimize frontend performance — list virtualization, smart pagination, responsive interactions on large datasets Implement real-time updates where they matter Partner with the Product Designer on mock-up reviews and on extending the component library Work with fullstack and backend engineers to shape the APIs that power the UI Build feedback loops and analytics that capture user interactions with new features Work directly with customers and design partners to validate UX and iterate quickly Qualifications: 5+ years of frontend engineering experience with deep expertise in React and TypeScript Strong track record of shipping production UIs in modern frameworks Hands-on experience working inside mature component libraries and design systems Experience with state management, performance optimization, and complex data fetching patterns Comfortable with data visualization libraries Strong eye for design fidelity — comfortable pushing back on patterns or mock-ups when something doesn't hold up Solid debugging skills in the browser and across the network boundary Experience gathering requirements from users and translating feedback into UI improvements Strong communication skills and comfort working directly with customers and design Scrappy; prior startup experience and not afraid to get their hands dirty Pragmatic; knows how to ship fast without unnecessarily complicating things Experience in (and thrives in) a fast-moving, start-up engineering environment Bonus Experience: Background in cybersecurity or developer tools Experience with real-time data updates and WebSocket implementations Experience designing or building accessible (WCAG-conformant) interfaces Experience with end-to-end testing frameworks You should apply if any of the following excite you: Owning the user experience layer of a multi-product cybersecurity platform Working mock-up-first alongside a strong Product Designer on tight iteration cycles Building dashboards and visualizations that turn complex data into clear, actionable views Shipping quickly against a clear competitive target without losing design quality Joining a small, scrappy team where your work shapes how the product feels to use Why Oneleet? At Oneleet, you’ll join a tight-knit team of rebels redefining the cybersecurity industry. We move fast, own our work, and challenge outdated models to make security effortless and effective for companies. Here’s what makes us special: We value impact over titles, autonomy over micromanagement, and clarity over jargon. You’ll tackle meaningful, hard problems with real-world consequences. You’ll work with smart, kind, and ambitious teammates who lift each other up. Perks & Benefits Comprehensive health & wellness benefits 20 days PTO per year, plus 8 floating holiday Remote work culture Team off-sites in stunning places (Amsterdam, Italy, etc). Competitive compensation & equity We hire globally and compensate competitively within each market using geographic pay bands. The range for this role reflects a US national baseline. Offers for candidates in higher cost-of-labor markets (e.g., San Francisco, New York, Zurich) may fall at or above the top of the posted range, while offers in other markets are benchmarked to local standards and are lower. Within any range, individual compensation is determined by work location, skills and experience demonstrated through the interview process, and relevant education or training. This posting reflects base salary only and does not include equity or benefits. _ Remote-First & Global Hiring _ We’re a remote-first company and hire globally in regions where we can legally engage talent directly or via our employer-of-record (EOR) partner. If you’re based outside the U.S., we’ll explore the most compliant hiring arrangement for your location. We make hiring decisions based on merit, skills, and potential regardless of location. _ U.S. Hiring & E-Verify _ For U.S.-based candidates, Oneleet participates in E-Verify to confirm employment eligibility, in accordance with federal regulations. We are an equal opportunity employer. We do not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other characteristic protected by applicable law.

Build and maintain integrations with cloud providers and third-party security tools, design reliable data pipelines with observability and recoverability. | 3+ years backend development experience, preferably in Go, proficiency in SQL and REST APIs, bachelor's degree preferred. | About Oneleet Oneleet is one of the fastest-growing security and compliance platforms in history. We are on a mission to change the compliance and security industry by making cybersecurity and compliance effective, easy, and painless. We provide a platform that helps companies build, manage, and monitor their cybersecurity programs and achieve compliance standards such as SOC 2 and ISO 27001 efficiently, without cutting corners. Having just raised a $33 million Series A, we are rapidly growing in customers and employees. Our team has decades of experience in security and compliance. Join our team of opinionated rebels and help us build a category-defining company reshaping the broken and fragmented compliance and cybersecurity industry. Who we’re looking for: We value passionate self-starters with a growth mindset and a bias for action and personal accountability. If you love solving hard problems, thrive in ambiguity, and want to make a real impact, you’ll fit right in. We’re especially drawn to: Rebels with a cause — frustrated with the status quo and eager to disrupt it. Opinionated (but not obstinate) builders — decisive yet collaborative, who help us move fast. Clear communicators — who own their ideas and follow through. Our mission is simple: make effective cybersecurity painless. We believe cybersecurity should empower, not burden. This belief unites our team and drives every decision we make. If you’re ready to challenge the status quo and help shape the future of cybersecurity, we’d love to meet you. As a security platform for startups, our product monitors cloud environments across AWS, GCP, and Azure to ensure customers are configured securely. We detect exposed storage buckets, verify encryption standards, identify overly permissive IAM policies, and track compliance with security frameworks — and we're expanding the breadth of integrations that power these capabilities. You will build and maintain the integrations that connect Oneleet's platform to the cloud providers, security tools, and third-party services our customers depend on. This is a backend-heavy role focused on reliability, data quality, and coverage — making sure we're pulling the right signals from the right places so our security features have what they need to work well. As a series A startup Software Engineer, you'll have the opportunity to collaborate with the founding team to understand business and customer needs and contribute to building the core technology that powers the Oneleet platform. Key Responsibilities: Build and maintain integrations with cloud providers (AWS, GCP, Azure) and third-party security tools to discover resources, sync configurations, and surface relevant security data Design data pipelines that normalize and validate inputs from diverse APIs, handling inconsistencies, pagination, rate limits, and evolving schemas Implement authentication flows including OAuth 2.0, OIDC, API keys, and service accounts across a wide range of external services Ensure integrations are reliable, observable, and recoverable — with solid error handling, retry logic, and alerting when things go wrong Create clear documentation for integration behavior, data mappings, and troubleshooting guidance Improve engineering standards, tooling, and shared patterns that make future integrations faster to build Collaborate with the broader engineering team to understand what data downstream features need and make sure integrations deliver it consistently Qualifications: Experience with strongly typed compiled languages like Go, Java, C#, C++, or Rust — we strongly prefer Go 3+ years of development experience with a focus on backend APIs, integrations, or data pipelines Experience integrating with REST APIs, working from API documentation, and handling real-world API quirks Experience with SQL Experience building or maintaining SaaS platform backends Bonus: Knowledge of authentication standards like OAuth 2.0, OIDC, and SAML Experience in the information security field Familiarity with cloud provider APIs (AWS SDK, GCP client libraries, Azure SDK) Experience with integration testing and debugging tools Bachelor's or Master's degree in Computer Science or related field You should apply if any of the following excite you: Making the world a more secure, privacy-focused, and trusted place Building the foundational plumbing that makes an entire security platform possible Automating processes that have a huge impact and save time for companies across the YC startup community Autonomy and the ability to make change within the company Working with passionate engineers who care a lot about the product Why Oneleet? At Oneleet, you’ll join a tight-knit team of rebels redefining the cybersecurity industry. We move fast, own our work, and challenge outdated models to make security effortless and effective for companies. Here’s what makes us special: We value impact over titles, autonomy over micromanagement, and clarity over jargon. You’ll tackle meaningful, hard problems with real-world consequences. You’ll work with smart, kind, and ambitious teammates who lift each other up. Perks & Benefits Comprehensive health & wellness benefits 20 days PTO per year, plus 8 floating holiday Remote work culture Team off-sites in stunning places (Amsterdam, Italy, etc). Competitive compensation & equity We hire globally and compensate competitively within each market using geographic pay bands. The range for this role reflects a US national baseline. Offers for candidates in higher cost-of-labor markets (e.g., San Francisco, New York, Zurich) may fall at or above the top of the posted range, while offers in other markets are benchmarked to local standards and are lower. Within any range, individual compensation is determined by work location, skills and experience demonstrated through the interview process, and relevant education or training. This posting reflects base salary only and does not include equity or benefits. Remote-First & Global Hiring We’re a remote-first company and hire globally in regions where we can legally engage talent directly or via our employer-of-record (EOR) partner. If you’re based outside the U.S., we’ll explore the most compliant hiring arrangement for your location. We make hiring decisions based on merit, skills, and potential regardless of location. U.S. Hiring & E-Verify For U.S.-based candidates, Oneleet participates in E-Verify to confirm employment eligibility, in accordance with federal regulations. We are an equal opportunity employer. We do not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other characteristic protected by applicable law.