Framework Engineer

About Oneleet

Oneleet is one of the fastest-growing security and compliance platforms in history. We are on a mission to change the compliance and security industry by making cybersecurity and compliance effective, easy, and painless. Our platform helps companies build, manage, and monitor their cybersecurity programs and achieve compliance standards such as SOC 2 and ISO 27001 efficiently, without cutting corners. Having just raised a $33 million Series A, we are rapidly growing in customers and employees. Our team has decades of experience in security and compliance.

We value passionate self-starters with a growth mindset and a bias for action and personal accountability. If you love solving hard problems, thrive in ambiguity, and want to make a real impact, you’ll fit right in. We’re especially drawn to:

• Rebels with a cause — frustrated with the status quo and eager to disrupt it.
• Opinionated (but not obstinate) builders — decisive yet collaborative, who help us move fast.
• Clear communicators — who own their ideas and follow through.

Our mission is simple: make effective cybersecurity painless. We believe cybersecurity should empower, not burden. This belief unites our team and drives every decision we make.

Responsibilities

• Research new frameworks, and break them down into requirements that map to our current control library.
• Evaluate our current control library for inefficiencies or superfluous requirements and keep it clean and focused.
• Build automations or documentation for our customers, so they can meet their requirements with the minimum amount of effort.
• Make improvements to the compliance product to make compliance easier for our customers.

Requirements

• Frustration with the current compliance space and how much security theatre there is within the companies you have worked with.
• Experience building security programs from scratch to meet compliance requirements.
• A self-starter mindset — you take initiative, adapt quickly, thrive in ambiguity, and enjoy building processes from scratch.
• Strong working knowledge of major compliance frameworks (ISO 27001, SOC 2, GDPR, HIPAA, PCI DSS).
• Comfort editing structured configuration files (JSON) and writing basic scripts to automate rule updates and validation checks.

Nice to Have

• Engineering or coding experience.
• Experience scaling an early-stage startup from Seed to Series A or beyond.

Why Oneleet?

At Oneleet, you’ll join a tight-knit team of rebels redefining the cybersecurity industry. We move fast, own our work, and challenge outdated models to make security effortless and effective for companies. Here’s what makes us special:

• We value impact over titles, autonomy over micromanagement, and clarity over jargon.
• You’ll tackle meaningful, hard problems with real-world consequences.
• You’ll work with smart, kind, and ambitious teammates who lift each other up.

Benefits

• Comprehensive health & wellness benefits.
• 20 days PTO per year, plus 8 floating holidays.
• Remote work culture.
• Team off-sites in stunning places (Amsterdam, Italy, etc).
• Competitive compensation & equity.

Pay

We hire globally and compensate competitively within each market using geographic pay bands. The range for this role reflects a US national baseline. Offers for candidates in higher cost-of-labor markets (e.g., San Francisco, New York, Zurich) may fall at or above the top of the posted range, while offers in other markets are benchmarked to local standards and are lower. Within any range, individual compensation is determined by work location, skills and experience demonstrated through the interview process, and relevant education or training. This posting reflects base salary only and does not include equity or benefits.

Compensation Range: $100K - $150K