oneleet - Vendor Supply Chain Analyst
Requirements
• We value passionate self-starters with a growth mindset and a bias for action and personal accountability. If you love solving hard problems, thrive in ambiguity, and want to make a real impact, you’ll fit right in. • We’re especially drawn to: • Rebels with a cause — frustrated with the status quo and eager to disrupt it. • Opinionated (but not obstinate) builders — decisive yet collaborative, who help us move fast. • Clear communicators — who own their ideas and follow through. • Our mission is simple: make effective cybersecurity painless. We believe cybersecurity should empower, not burden. This belief unites our team and drives every decision we make. • If you’re ready to challenge the status quo and help shape the future of cybersecurity, we’d love to meet you. • Hands-on experience conducting vendor security due diligence or third-party security assessments. • Strong research skills and the judgment to distinguish evidence from marketing claims. • Familiarity with SaaS security practices and public security, privacy, and compliance documentation. • An analytical mindset and comfort investigating discrepancies, documenting uncertainty, and checking whether a score reflects the underlying evidence. • Clear written communication and careful documentation habits. • A self-starter mindset: you take initiative, adapt quickly, thrive in ambiguity, and enjoy building processes from scratch. • Experience evaluating AI-generated research or designing human review processes. • Experience measuring research accuracy, calibrating scoring systems, or building quality assurance processes. • A background in third-party risk, compliance, or security research. • Experience helping an early-stage startup grow from Seed to Series A or beyond. • Scripting or automation skills that help you analyze results or make verification more efficient.
Responsibilities
• Verify vendor research. Check AI-generated findings against saved sources, prioritizing vendors by how many customers use them. Correct unsupported claims and distinguish confirmed findings from missing or inconclusive evidence. • Build and maintain the vendor library. Research new SaaS vendors, resolve incomplete records, and review significant changes flagged by the pipeline, including breaches and changes to security practices. • Resolve source-access gaps. When the pipeline cannot fetch a page or encounters a login barrier, find an accessible source or manually upload an available document. • Confirm public security claims. Verify evidence for criteria such as SSO availability, published DPAs, subprocessor lists, and whether a SOC 2 report exists. • Measure accuracy and calibrate scoring. Evaluate research accuracy during the proof of concept and beyond. Compare computed scores with existing customer-assigned ratings, investigate differences, and recommend adjustments where the evidence supports them. • Improve research quality. Document recurring errors, missed evidence, and ambiguous results, then give engineering actionable feedback to improve the AI pipeline. • Recommend criteria updates. Identify gaps or unclear definitions in the evaluation criteria and propose changes as vendor practices and security expectations evolve. • Maintain defensible evidence. Keep findings traceable to saved sources, with clear reasoning and research dates, so customers and auditors can understand the basis for a finding months later. • Develop verification runbooks. Document repeatable review steps and escalation paths that help the team make consistent decisions.
Benefits
• At Oneleet, you’ll join a tight-knit team of rebels redefining the cybersecurity industry. We move fast, own our work, and challenge outdated models to make security effortless and effective for companies. • Here’s what makes us special: • We value impact over titles, autonomy over micromanagement, and clarity over jargon. • You’ll tackle meaningful, hard problems with real-world consequences. • You’ll work with smart, kind, and ambitious teammates who lift each other up. • Comprehensive health & wellness benefits • 20 days PTO per year, plus 8 floating holiday • Remote work culture • Team off-sites in stunning places (Amsterdam, Italy, etc). • We hire globally and compensate competitively within each market using geographic pay bands. The range for this role reflects a US national baseline. Offers for candidates in higher cost-of-labor markets (e.g., San Francisco, New York, Zurich) may fall at or above the top of the posted range, while offers in other markets are benchmarked to local standards and are lower. Within any range, individual compensation is determined by work location, skills and experience demonstrated through the interview process, and relevant education or training. This posting reflects base salary only and does not include equity or benefits. • Remote-First & Global Hiring • We’re a remote-first company and hire globally in regions where we can legally engage talent directly or via our employer-of-record (EOR) partner. If you’re based outside the U.S., we’ll explore the most compliant hiring arrangement for your location. We make hiring decisions based on merit, skills, and potential regardless of location. • U.S. Hiring & E-Verify
Apply in one click
Upload My Resume
Drop here or click to browse · Tap to choose · PDF, DOCX, DOC, RTF, TXT