Oneleet is the cybersecurity platform for building real security controls, achieving compliance (SOC 2, ISO 27001, GDPR, HIPAA), and maintaining a strong security posture as you grow. 

Everything You Need in One Platform- Manage your entire security program from a single view. 

At Oneleet, we believe compliance should follow security—not the other way around. We start by building a pragmatic, effective security program tailored to your company. We provide the tools and expertise you need.

Oneleet

Health Insurance

Equity / Stock Options

Paid Time Off

Company Events

Oneleet is one of the fastest-growing security and compliance platforms in history. We are on a mission to change the compliance and security industry by making cybersecurity and compliance effective, easy, and painless. We provide a platform that helps companies build, manage, and monitor their cybersecurity programs and achieve compliance standards such as SOC 2 and ISO 27001 efficiently, without cutting corners.

, we are rapidly growing in customers and employees. Our team has decades of experience in security and compliance. Join our team of opinionated rebels and help us build a category-defining company reshaping the broken and fragmented compliance and cybersecurity industry.

We value passionate self-starters with a growth mindset and a bias for action and personal accountability. If you love solving hard problems, thrive in ambiguity, and want to make a real impact, you’ll fit right in.

Rebels with a cause — frustrated with the status quo and eager to disrupt it.

Opinionated (but not obstinate) builders — decisive yet collaborative, who help us move fast.

Clear communicators — who own their ideas and follow through.

Our mission is simple: make effective cybersecurity painless. We believe cybersecurity should empower, not burden. This belief unites our team and drives every decision we make.

If you’re ready to challenge the status quo and help shape the future of cybersecurity, we’d love to meet you.

will own the data backbone of our go-to-market motion, from first ad click to closed-won deal. You’ll work alongside our GTM Engineer, and you will have a deep focus on synthesizing funnel insights between marketing and sales. You will be responsible for gathering, analyzing, interpreting, and visualizing all of our marketing and sales data.

You will build and maintain the pipeline that pulls data from HubSpot, Dreamdata, Google Ads, LinkedIn, PostHog, and our website into BigQuery as a single, trustworthy source of truth. You will be the person who can explain, with certainty, why HubSpot says one number and Google Ads says another, and which one to believe. You will turn that clean data into dashboards executives actually use, and into account intelligence that makes our ABM and outbound motions sharper.

You will thrive here if you get genuinely excited building motions from scratch, about reconciling conflicting numbers across platforms, if you understand browsers and tracking well enough to explain why the discrepancy exists, and if you’d rather build a pipeline once, correctly, than patch the same spreadsheet every week.

Design, build, and manage our data pipeline in BigQuery, unifying data from HubSpot, Dreamdata, Google Ads, LinkedIn, PostHog, and the website into one reliable source of truth. Document the pipeline so it scales beyond you and survives tool changes.

 Maintain deep, working knowledge of how browsers work, how data is sent, and how cookies, JavaScript, and (server-side) GTM are used. Investigate and resolve discrepancies between platforms and explain why to stakeholders, not just report the gap.

Configure and continuously refine Dreamdata to model the full prospect journey, anonymous visitor to closed-won. Use Dreamdata to determine which channels and campaigns are actually generating pipeline. Partner with sales and marketing to translate Dreamdata insights into budget and channel decisions.

 Build and maintain a clear, executive-facing dashboard (Looker/Looker Studio) showing the performance by channel: spend, leads, meetings, pipeline, and closed-won. Ensure dashboards answer “where is revenue actually coming from?” at a glance, with the ability to drill into any channel or campaign. Keep reporting logic consistent with the underlying attribution model so numbers don’t silently diverge.

 Design and run an ABM strategy grounded in our ICP, using Clay to enrich and score accounts, layering in firmographic, intent, and behavioral signals. Leverage AI to personalize messaging at scale in a way that actually gets replies.

5+ years in GTM operations, revenue operations, marketing operations, or analytics engineering at a B2B SaaS company, with hands-on ownership of marketing/sales data infrastructure.

Scientific mindset of experimentation, creating and testing hypotheses.

Love of working on new platforms that help automate and enhance channel performance. 

Knowledge of how to simplify and act on findings. 

Strong SQL skills and hands-on experience building and maintaining pipelines in BigQuery (or a comparable warehouse).

Deep understanding of how browsers, cookies, JavaScript, and tracking pixels work. Able to diagnose why numbers differ across platforms, not just flag that they do.

Hands-on experience with Google Tag Manager, including server-side GTM and data layer configuration.

Experience with Dreamdata or a comparable B2B attribution platform (Bizible, HubSpot Attribution, etc.).

Hands-on HubSpot experience (CRM, Marketing Hub, Operations Hub): workflows, custom objects, data sync.

BI tool proficiency (Looker / Looker Studio, Tableau, or similar). Building dashboards, not just reading them.

Working knowledge of APIs, webhooks, and data integration patterns across platforms not designed to talk to each other.

Deep understanding of B2B SaaS funnels, buyer journeys, and revenue metrics (MQL, SQL, pipeline, win rate, CAC, LTV).

Experience designing and implementing UTM strategies and multi-touch attribution models.

Understanding of ABM fundamentals: ICP definition, account scoring, and personalized outbound at scale.

Cross-functional communication skills. Able to explain a tracking discrepancy to a sales rep and an attribution model to a CEO with equal clarity.

Experience at an early-stage startup as the first or only data/ops hire.

Experience with Clay (workflows, enrichment, AI columns, Claygent).

Python scripting for data manipulation and automation.

Experience with PostHog or similar product analytics tools.

Familiarity with reverse ETL tooling and broader data warehousing concepts.

HubSpot certifications (Revenue Operations, Marketing Hub, Operations Hub).

Google Ads campaign management and conversion optimization experience.

At Oneleet, you’ll join a tight-knit team of rebels redefining the cybersecurity industry. We move fast, own our work, and challenge outdated models to make security effortless and effective for companies.

We value impact over titles, autonomy over micromanagement, and clarity over jargon.

You’ll tackle meaningful, hard problems with real-world consequences.

You’ll work with smart, kind, and ambitious teammates who lift each other up.

20 days PTO per year, plus 8 floating holiday

Team off-sites in stunning places (Amsterdam, Italy, etc).

We hire globally and compensate competitively within each market using geographic pay bands. The range for this role reflects a US national baseline. Offers for candidates in higher cost-of-labor markets (e.g., San Francisco, New York, Zurich) may fall at or above the top of the posted range, while offers in other markets are benchmarked to local standards and are lower. Within any range, individual compensation is determined by work location, skills and experience demonstrated through the interview process, and relevant education or training. This posting reflects base salary only and does not include equity or benefits.

We’re a remote-first company and hire globally in regions where we can legally engage talent directly or via our employer-of-record (EOR) partner. If you’re based outside the U.S., we’ll explore the most compliant hiring arrangement for your location. We make hiring decisions based on merit, skills, and potential regardless of location.


For U.S.-based candidates, Oneleet participates in E-Verify to confirm employment eligibility, in accordance with federal regulations. We are an equal opportunity employer. We do not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other characteristic protected by applicable law. 

This company uses automated technology, including AI-assisted tools, to assist in reviewing applications, assessing candidate qualifications, and detecting fraudulent submissions. These tools analyze application data and identity signals to support, but not replace, human hiring decisions. All final hiring decisions are made by a human reviewer. Candidates who require accommodation or who wish to request information about how these tools are used, including requesting the bias audit results, may contact recruiting@oneleet.com. This process is conducted in compliance with applicable federal, state, and local laws.

You have a right to take at least 10 business days to decide whether to proceed with submitting your information through this process. By continuing, you confirm your understanding of this notice. If you choose to proceed before the 10-business-day period expires, you are making a knowing and voluntary decision to do so.

Experience Requirement

Oneleet is hiring a GTM Engineer for Data & Attribution to manage the data infrastructure of their go-to-market motion. The role focuses on building BigQuery pipelines, implementing attribution models via Dreamdata, and developing executive dashboards in Looker. The ideal candidate will leverage HubSpot and Google Tag Manager to synthesize funnel insights.

GTM Engineer - Data & Attribution

Full Time

You will be the architect of the community and event experience that makes Oneleet the most connected name in cybersecurity and compliance. From intimate customer dinners and executive roundtables to industry conferences and digital community spaces, you will build the programs that turn customers, prospects, and practitioners into a genuine Oneleet community.

This is a founding role. You will define the strategy, build the infrastructure, and create the moments that matter. You will work hand-in-hand with Sales, Marketing, and Customer Success teams to ensure every event and community touchpoint is purposeful, on-brand, and driving real relationships that translate into pipeline and retention.

You will thrive here if you believe that community is a growth strategy, not a feel-good initiative- and if you have the operational discipline to execute flawlessly while never losing sight of the human experience you are trying to create.

Own the full Oneleet events calendar, from intimate executive dinners and customer roundtables to hosted meetups, webinars, and presence at major industry conferences.

Design event experiences that feel distinctly Oneleet: thoughtful, high-quality, and anything but generic.

Manage end-to-end event logistics: venue sourcing, vendor management, invitations, run-of-show, on-site execution, and post-event follow-through.

Build a repeatable playbook for flagship event formats so the program can scale without losing quality.

Build Oneleet's community event strategy from the ground up, defining the audience, the value proposition, the platforms, and the programming that will make practitioners and buyers want to be part of it.

Partner with our Content & Community Lead on a content and programming calendar for the community: AMAs with security experts, compliance Q&A sessions, peer networking threads, and product feedback loops.

Build a champion and ambassador program that turns Oneleet's most enthusiastic customers into active community voices.

Design and run exclusive programs for senior stakeholders- CISO roundtables, CTO advisory dinners, customer advisory boards- that deepen relationships and generate strategic insights.

Partner with Sales and Customer Success to identify the right attendees for the right events and ensure every invitation feels personal and intentional.

Create closed, peer-led forums where security and compliance leaders can connect, share challenges, and see Oneleet as the trusted platform at the center of those conversations.

Own Oneleet's strategy and presence at key industry events and other relevant conferences.

Coordinate booth experiences, sponsored sessions, side events, and executive meetings that maximize Oneleet's impact at each conference.

Scout and evaluate new conference and sponsorship opportunities that align with where Oneleet's buyers spend their time.

Define and track the metrics that prove community and events are driving business outcomes: pipeline influenced, retention impact, community. growth, engagement rates, and event NPS.

Report regularly on program performance and make data-informed decisions about where to invest and what to cut.

Continuously gather feedback from community members and event attendees to improve the experience over time.

3-6+ years of experience in event marketing, community management, field marketing, or developer/customer relations at a B2B SaaS or technology company.

Proven experience building and managing a B2B community or event program, ideally from an early stage.

Exceptional event production skills, you have run events that people still talk about, and you know how to make the logistics invisible so the experience shines.

Strong relationship-building instincts; you are genuinely energized by connecting people and facilitating conversations that would not have happened otherwise.

Highly organized with the ability to manage multiple events and community programs simultaneously without dropping details.

Creative program designer who can develop new event formats and community rituals that feel fresh and earn repeat attendance.

Clear understanding of how community and events connect to pipeline, retention, and brand. You can articulate the business case and prove it with data.

Experience working closely with Sales and Customer Success to align community and event programs to revenue goals.

Ability to manage budgets, vendor contracts, and agency relationships with precision.

Strong written and verbal communication skills- you can write a compelling event invitation and hold a room as an emcee.

We work remotely, however ideally you are based in or near San Francisco for community events central to that location.

Experience in cybersecurity, compliance, GRC, or a technical B2B category- familiarity with the audience Oneleet serves.

Experience building a community platform from scratch (Slack, Discord, Circle, or similar).

Existing relationships with event venues, production vendors, or conference organizers in the tech ecosystem.

Experience running executive-level programs: advisory boards, roundtables, or C-suite dinners.

Familiarity with HubSpot for event tracking, invite management, and post-event follow-up workflows.

Experience managing a small team or external contractors as programs scale.

Comfort with video production and webinar platforms for virtual and hybrid event formats.

Work Authorization Required

Oneleet is seeking a Community Event & Engagement Manager to architect and execute a comprehensive community and event strategy. The role focuses on building high-impact experiences, from executive roundtables to industry conferences, to drive pipeline and retention. Key responsibilities include event production, community program building, and utilizing HubSpot for tracking.

Community Event & Engagement Manager - San Francisco, CA

Community Event & Engagement Manager

The Security Program Manager is part vCISO & part account manager. You will work with our customers from the start to assess their current security/compliance framework, provide guidance and recommendations for improvements, and work with clients to implement recommendations. You're passionate about security, and enjoy sharing your knowledge with not only our customers but your colleagues.

Conduct initial consultation calls with new clients to assess their current security posture, infrastructure stack, compliance requirements and overall objectives.

Provide guidance and recommendations for improving client security posture

Develop high-level security programs consisting of technical, operational and administrative controls based on industry frameworks and client needs.

Collaborate with clients to customize and refine the security program to match their specific use cases.

Communicate with clients and stakeholders to ensure smooth and efficient security program creation

Liaise with auditors to ensure clients' security programs align with auditors' expectations

Maintain expertise across a range of security frameworks, control types, and technologies including NIST, SOC2, ISO27001, CMMC, AWS, Azure, GCP, Kubernetes, Docker, Terraform, and more.

Provide feedback to Oneleet's engineering team to inform development of integrations, solutions, and products that deliver on client needs.

Be highly technical, learn new technologies quickly, and translate security concepts into implementations.

Partner with internal teams to translate security programs into implementations consisting of policies, procedures, configurations and software integrations.

Broad knowledge of security best practices, frameworks, control types, and relevant technologies.

Ability to understand client infrastructure and map security controls to meet compliance goals.

Strong analytical skills to evaluate environments and determine appropriate safeguards.

Excellent verbal and written communication skills.

Self-driven with the ability to work independently and move fast in a startup environment.

Willingness to go the extra mile to meet tight deadlines and deliver results.

Oneleet is seeking a Security Program Manager to act as a vCISO and account manager for clients. The role involves assessing security postures, developing security programs based on frameworks like SOC 2 and ISO 27001, and guiding implementations across AWS and Azure environments. This remote-first position requires a blend of technical expertise and stakeholder management skills.

Security Program Manager

 at Oneleet, you'll own the product direction for our new code security suite — a full bundle of capabilities spanning SAST, SCA, DAST, IaC scanning, secrets detection, container scanning, and more. You'll be responsible for sequencing what we build, making sharp tradeoff calls under deadline, and ensuring each module ships against a clearly defined competitive bar.

This is a hands-on PM role at a Series A company. You'll work directly with the founding team, design, and engineering — and you'll be expected to read scanner outputs, understand the security domain, and make calls without needing engineering to translate. You won't be writing exhaustive specs; you'll be making decisions, cutting scope, and shipping.

You'll work closely with customers and design partners to validate priorities, and you'll own the bundle-level competitive positioning against incumbents in the space.

Own the roadmap and sequencing for our code security bundles, prioritizing modules across need / want / nice-to-have tiers

Make scope tradeoff calls quickly under deadline pressure, including what to cut to ship on time

Work directly with design on mock-ups before engineering begins, providing product direction without requiring detailed specs

Partner with engineering leadership on technical tradeoffs and sequencing of dependencies across modules

Run design partner programs and customer interviews to validate priorities and gather feedback on shipped features

Define the competitive bar for each module based on direct comparison against incumbents in the space

Coordinate the free tier and Product Hunt launch plan, including which features to give away and how to upsell into paid

Track usage, success metrics, and engagement for shipped features and feed signal back into the roadmap

Collaborate with go-to-market on positioning, pricing, and bundle structure as we move from build to launch

Partner with the Oneleet Intelligence team on AI-powered features integrated into the bundles

5+ years of product management experience, with significant time at security, developer tools, or other technical SaaS companies

Has shipped at least one product against a named competitor and can walk through the strategy

Comfortable reading SARIF files, scanner outputs, or similar technical data without needing engineering to translate

Sharp tradeoff reasoning under deadline — comfortable cutting scope and saying no

Strong communication skills across customers, engineering, design, and executive stakeholders

Pragmatic; knows when to make a call with imperfect information rather than wait for certainty

Scrappy; prior startup experience and not afraid to get their hands dirty

Comfortable wearing many hats — competitive analysis, GTM input, customer calls, and roadmap all in one week

Experience in (and thrives in) a fast-moving, start-up engineering environment

Background in cybersecurity, application security, or related fields

Experience with bundle-based or platform-based product strategy against an incumbent

Prior experience with PLG and free-tier-led GTM motions

You should apply if any of the following excite you:

Owning the product direction for a full code security suite from zero to launch

Making sharp tradeoff calls and shipping rather than writing exhaustive specs

Working directly with customers and design partners on a tight feedback loop

Building product against a clear competitive target and tipping deals with thoughtful bundle design

Being part of bringing a modern, well-designed product to a category dominated by clunky incumbents

Oneleet is seeking a Product Manager to lead the development of their new code security suite. This hands-on role involves owning the product roadmap, managing technical tradeoffs for modules like SAST and DAST, and collaborating with engineering and design. The ideal candidate has 5+ years of experience in technical SaaS or cybersecurity environments.

Product Manager

 at Oneleet, you'll bring security depth to our product engineering teams as we expand our cybersecurity platform. You'll own the security judgment layer that sits between raw tooling output and what our customers actually see — deciding what to surface, what to suppress, and how to make findings genuinely useful rather than noisy.

This is a hands-on, security-first engineering role at a Series A startup. You'll work closely with backend and fullstack engineers on how findings are stored, enriched, and presented, and you'll partner with product and design on what to build next. You'll be the security voice in product and engineering decisions, and you'll be empowered to push back when security judgment requires it.

You'll work directly with customers — security teams using the platform day-to-day — to understand what they actually need, and iterate quickly based on their feedback.

Own the integration, configuration, and output quality of security tooling that powers our platform

Tune outputs to maximize signal and minimize noise — decide what to surface, what to suppress, and what to enrich

Design rules, severity scoring, and triage flows that make findings actionable rather than overwhelming

Build the security judgment layer on top of underlying tooling — context-aware prioritization and exploitability reasoning

Partner with engineers on how findings are presented in the UI and how remediation flows work

Work with PM and design on roadmap priorities, providing the security expertise that drives what to build next

Review and shape architectural choices that affect security outcomes

Engage with customers directly to understand how they use the platform and what's blocking adoption

Benchmark our output quality against competitors and close gaps where they exist

Contribute back to the open source security tooling we depend on where it makes sense

5+ years of application security experience, with significant time shipping security products

Strong programming skills in at least one of Go, Python, or TypeScript — this is a product engineering role with security depth, not security operations

Hands-on experience tuning security tooling for production use — reducing false positives, building suppression logic, designing severity models

Understanding of vulnerability research, CVE/CWE taxonomies, and exploit reasoning

Has worked through what makes a security finding actually actionable vs. just technically true

Excellent communication skills and comfort working directly with customers

Pragmatic; knows how to build things fast without unnecessarily complicating things

Prior experience shipping a security product at a vendor

Contributions to open source security tooling

Offensive security background or OSCP / similar certifications

Hands-on experience with LLM agents, tool use, or autonomous AI systems

Owning the security depth of a product from tooling integration to user-facing findings

Being the security voice in a product team that ships fast and listens to customers

Building on top of best-in-class open source tooling rather than reinventing from scratch

Working directly with security teams using the product and iterating on real-world feedback

Joining a small, scrappy team where your security judgment shapes both the product and the company

Oneleet is seeking an Application Security Engineer to build and refine the security judgment layer of their cybersecurity platform. The role involves tuning security tooling to reduce noise, designing severity models, and collaborating with product teams. Proficiency in Go, Python, or TypeScript and extensive experience in application security are required.

Application Security Engineer

As a Senior Product Designer at Oneleet, you'll shape how security teams experience our cybersecurity platform. You'll own the end-to-end user experience — making sure complex security concepts feel approachable and that users can find their way through the product intuitively.

This is a hands-on, UX-led design role. You'll spend real time with users, understand how they work, and design flows that fit naturally into their day. You'll partner closely with PM, engineering, and our customers — and you'll be expected to propose solutions rather than wait for full specs.

You'll collaborate directly with the founding team, our PM, and engineering at a Series A startup — and you'll talk to customers regularly to understand how security practitioners actually work day-to-day.

Own the end-to-end user experience of the platform — information architecture, navigation, onboarding, and core workflows

Run usability research and customer interviews to understand how users work and where flows can be improved

Design onboarding and first-run experiences that help new users get value from the product quickly

Translate complex security data, findings, and remediation flows into experiences that feel approachable

Design patterns that hold up across the platform — navigation, filtering, triage, and reporting that work the same way everywhere

Extend and maintain our existing Storybook component library so the broader team can ship consistently and fast

Partner with PM on scoping and tradeoffs, making sharp calls about what to cut to ship on deadline

Review engineering output and pair closely during build to keep design intent intact through implementation

Develop reusable patterns for new AI-powered and automated workflows on the platform

5+ years of product design experience, with significant time at developer tools, security, or enterprise SaaS companies

Has shipped at least one enterprise product end-to-end and can walk through the UX tradeoffs made

Strong UX instincts — comfortable running usability studies, observing user behavior, and translating findings into design decisions

Track record of improving learnability and time-to-first-value in complex products

Expert with Figma, including working inside and contributing to mature component libraries

Strong systems thinker who can design patterns that scale across the product, not just individual screens

Oneleet is seeking a Senior Product Designer to lead the end-to-end user experience of its cybersecurity and compliance platform. The role involves conducting usability research, designing complex enterprise workflows, and maintaining a Storybook component library using Figma. This is a remote-first position focused on making technical security concepts approachable for users.

Timezone Matching

Remote Jobs at Oneleet

Hiring Locations

Benefits & Perks

Eligibility Requirements

💼 Open Jobs (7)