Toolmill Briefswhat companies are building, read from their hiring

Company brief · updated 2026-10-19

Oneleet

oneleet.com · B2B · Oneleet combines compliance automation, human pentests, code scanning, device management and a dedicated vCISO for SOC 2, ISO 27001 and more.

12open roles
4new in 30 days
0closed in 30 days
12remote-eligible
steadyhiring velocity

What they're building

Code security scanning suite strong signal

Today: Site heading 'Code Security Scanner' and text 'Automatically scan your code for vulnerabilities and security flaws'

Roles: Product Manager · Application Security Engineer

Requirements mention: SAST · SCA · DAST · IaC scanning · secrets detection · container scanning · SARIF files · suppression logic · triage flows

Inference: the Product Manager posting describes 'its new code security suite' spanning several scan types, and the Application Security Engineer posting adds triage and suppression of findings. This suggests a broader code scanning product than the current scanner.

Security program management for compliance clients moderate signal

Today: Site text 'Our Compliance Platform simplifies the process of adhering to regulatory requirements'

Roles: Security Program Manager - LATAM · Security Program Manager

Requirements mention: SOC 2 · ISO 27001 · vCISO · client facing · CISSP

Inference: two Security/Compliance program manager roles, one tied to LATAM - Remote and one to United States, point to more staff running compliance programs for clients.

Go-to-market data and attribution weak signal

Today: Not on the site. The posting lists existing sources: HubSpot, Dreamdata, Google Ads, LinkedIn, PostHog and website data.

Roles: GTM AI Engineer - Data & Attribution

Requirements mention: BigQuery · server-side GTM · multi-touch attribution · Looker Studio

Inference: the posting describes one BigQuery source of truth for the go-to-market motion. The posting does not say this is a product.

AI features inside the security platform weak signal

Today: Site text 'Automation and Oneleet AI fix most gaps for you.'

Roles: Fullstack Engineer, AI Implementation

Requirements mention: AI service endpoints · WebSocket implementations · production monitoring

Inference: one posting, opened 2025-11-03, describes presenting AI-generated insights and automations to security teams. It is a single role, so the signal is limited.

Where the headcount is going

DepartmentOpen
Security/Compliance5
Product2
Engineering/Dev2
Customer Success1
Operations1
Marketing1

Eight open roles across five departments: Security/Compliance 2, Product 2, Engineering/Dev 2, Operations 1 and Marketing 1, with one role opened in the last 30 days and one in the prior 30 days.

Who they need

Seniority: Mostly mid-level: 4 mid, 3 senior and 1 manager.

Skills named most: SOC 2, ISO 27001, CISSP, CISA, CISM, Go, Python, React, HubSpot, BigQuery, Figma, Storybook component library

Locations: 8 of 8 roles are remote: 4 tied to US/EU - Remote, 3 to United States, and 1 to LATAM - Remote.

How to use this

If you're applying: Security/Compliance and Engineering roles list specific frameworks and languages as requirements, so check those against your background before applying. The Security Program Manager - LATAM role is the only LATAM-tied role, and it is remote.

If you're selling or recruiting: Eight open roles with steady velocity: one new role in the last 30 days and none closed. Security/Compliance, Product and Engineering each have 2 roles; Operations and Marketing have 1 each. Ask about the code security suite and the compliance program hiring first.

Get told when Oneleet opens new roles.

Weekly, only when something changed. One click to stop.

Open roles (12)

TitleDepartmentLocationPosted
Penetration Testing Coordinator Security/ComplianceUS/LATAM - Remote (remote)2026-10-23
Vendor Supply Chain AnalystSecurity/ComplianceUS/EU - Remote (remote)2026-10-23
Associate Security Program ManagerSecurity/ComplianceUS/LATAM - Remote (remote)2026-10-21
Customer Support SpecialistCustomer SuccessUS/LATAM - Remote (remote)2026-10-20
Security Program Manager - LATAMSecurity/ComplianceLATAM - Remote (remote)2026-09-21
GTM AI Engineer - Data & AttributionOperationsUS/EU - Remote (remote)2026-08-25
Community Event & Engagement Manager - San Francisco, CAMarketingUnited States (remote)2026-08-17
Security Program ManagerSecurity/ComplianceUnited States (remote)2026-07-06
Product ManagerProductUnited States (remote)2026-05-29
Application Security EngineerEngineering/DevUS/EU - Remote (remote)2026-05-28
Senior Product DesignerProductUS/EU - Remote (remote)2026-03-07
Fullstack Engineer, AI ImplementationEngineering/DevUS/EU - Remote (remote)2025-11-03