About Oneleet

Oneleet is one of the fastest-growing security and compliance platforms in history. We are on a mission to change the compliance and security industry by making cybersecurity and compliance effective, easy, and painless. We provide a platform that helps companies build, manage, and monitor their cybersecurity programs and achieve compliance standards such as SOC 2 and ISO 27001 efficiently, without cutting corners.

Having just raised a $33 million Series A, we are rapidly growing in customers and employees. Our team has decades of experience in security and compliance. Join our team of opinionated rebels and help us build a category-defining company reshaping the broken and fragmented compliance and cybersecurity industry.

Who we’re looking for:

We value passionate self-starters with a growth mindset and a bias for action and personal accountability. If you love solving hard problems, thrive in ambiguity, and want to make a real impact, you’ll fit right in.

We’re especially drawn to:

• Rebels with a cause — frustrated with the status quo and eager to disrupt it.

• Opinionated (but not obstinate) builders — decisive yet collaborative, who help us move fast.

• Clear communicators — who own their ideas and follow through.

Our mission is simple: make effective cybersecurity painless. We believe cybersecurity should empower, not burden. This belief unites our team and drives every decision we make.

If you’re ready to challenge the status quo and help shape the future of cybersecurity, we’d love to meet you.

We’re looking for a tech-savvy relationship builder to lead our customers through every stage of their penetration testing journey with us. In this role, you’ll own pentest engagements from start to finish- running scoping calls, coordinating test execution, and acting as the trusted point of contact for clients. You’ll translate complex security work into clear guidance, answer questions along the way, and ensure every deliverable lands smoothly and on time.

This role is a great fit for a junior pentester who’s eager to grow and gain exposure to the business side of security. You’ll sharpen your technical skills while also building client relationships, learning how engagements are scoped, managed, and delivered, and seeing firsthand how security work drives real business outcomes. If you enjoy collaborating with people, explaining technical concepts in a clear way, and want a well-rounded path to advance your career, this position offers hands-on experience and meaningful growth opportunities.

Key Responsibilities

• Lead scoping calls with clients to understand requirements, timelines, and target environments

• Serve as primary point of contact for clients throughout the engagement lifecycle

• Manage project schedules and ensure deliverables are completed on time

• Answer client questions regarding testing approach, findings, and remediation guidance

• Coordinate internal resources and communicate project status to stakeholders

• Facilitate kickoff meetings, status updates, and closeout discussions

• Handle engagement logistics including access provisioning, scheduling, and documentation

• Gather and organize pre-engagement information (IP ranges, credentials, rules of engagement)

• Ensure client satisfaction and address concerns promptly and professionally

• Support quality assurance processes to ensure consistent deliverable standards

• Assist pentesters on complex engagements and act as the point contact for escalated technical issues as needed

• Stay current on emerging threats, vulnerabilities, and testing methodologies

Requirements

• 1-3 years of experience in penetration testing, security assessments, or related cybersecurity role

• Previous client-facing or customer service experience preferred

• Understanding of networking fundamentals

• Familiarity with operating systems and command line interfaces

• Basic knowledge of web application technologies and common attack vectors

• Ability to read and understand basic code

• Strong written and verbal communication skills with ability to explain technical concepts to non-technical audiences

• Professional demeanor with excellent client interaction abilities

• Strong organizational skills with ability to manage multiple engagements simultaneously

• Detail-oriented with excellent time management abilities

• Proven ability to meet deadlines and work independently

Why Oneleet?

At Oneleet, you’ll join a tight-knit team of rebels redefining the cybersecurity industry. We move fast, own our work, and challenge outdated models to make security effortless and effective for companies.

Here’s what makes us special:

• We value impact over titles, autonomy over micromanagement, and clarity over jargon.

• You’ll tackle meaningful, hard problems with real-world consequences.

• You’ll work with smart, kind, and ambitious teammates who lift each other up.

Perks & Benefits

• Comprehensive health & wellness benefits

• 20 days PTO per year, plus 8 floating holiday

• Remote work culture

• Team off-sites in stunning places (Amsterdam, Italy, etc).

• Competitive compensation & equity

We hire globally and compensate competitively within each market using geographic pay bands. The range for this role reflects a US national baseline. Offers for candidates in higher cost-of-labor markets (e.g., San Francisco, New York, Zurich) may fall at or above the top of the posted range, while offers in other markets are benchmarked to local standards and are lower. Within any range, individual compensation is determined by work location, skills and experience demonstrated through the interview process, and relevant education or training. This posting reflects base salary only and does not include equity or benefits.

Remote-First & Global Hiring

We’re a remote-first company and hire globally in regions where we can legally engage talent directly or via our employer-of-record (EOR) partner. If you’re based outside the U.S., we’ll explore the most compliant hiring arrangement for your location. We make hiring decisions based on merit, skills, and potential regardless of location.

U.S. Hiring & E-Verify

For U.S.-based candidates, Oneleet participates in E-Verify to confirm employment eligibility, in accordance with federal regulations. We are an equal opportunity employer. We do not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other characteristic protected by applicable law.

How we use AI in this Hiring Process

This company uses automated technology, including AI-assisted tools, to assist in reviewing applications, assessing candidate qualifications, and detecting fraudulent submissions. These tools analyze application data and identity signals to support, but not replace, human hiring decisions. All final hiring decisions are made by a human reviewer. Candidates who require accommodation or who wish to request information about how these tools are used, including requesting the bias audit results, may contact recruiting@oneleet.com. This process is conducted in compliance with applicable federal, state, and local laws.

Notice for New York City Residents:

You have a right to take at least 10 business days to decide whether to proceed with submitting your information through this process. By continuing, you confirm your understanding of this notice. If you choose to proceed before the 10-business-day period expires, you are making a knowing and voluntary decision to do so.

1-3 years penetration testing or security assessment experience; understanding of networking, OS, CLI, web app technologies, and basic code; strong communication and organizational skills; ability to work independently.

Key Responsibilities

• leading scoping calls
• coordinating test execution
• managing project schedules

Job Details

• Category: Information Technology
• Seniority: Entry Level
• Commitment: Full Time
• Workplace: Remote — United States or South America
• Salary: USD 50,000 – 90,000 / year
• Languages: English

Benefits

• Generous paid time off

About Oneleet

A fast-growing security and compliance platform making cybersecurity and compliance effective, easy, and painless. — Industry: Information Technology