Remote Vendor Security Research Analyst

Oneleet; United States; Remote; USD 90,000 - 140,000; Full time

Benefits offered by this job

Comprehensive health & wellness benefit

20 days PTO + 8 floating holidays

Remote work culture

Team off-sites (Amsterdam, Italy, etc)

Job summary

Oneleet is a fast‑growing security and compliance platform seeking a Vendor Supply Chain Analyst. You will verify AI‑generated research by cross‑checking with saved sources and resolve gaps to ensure evidence supports conclusions.

Engineering handles the AI pipeline, while you provide actionable feedback to improve accuracy and reliability. In this remote‑first role, you will prioritize vendors used by many customers, help shape verification playbooks, and contribute to scalable vendor security

Qualifications

• Hands‑on experience conducting vendor security due diligence or third‑party security assessments.
• Strong research skills and the judgment to distinguish evidence from marketing claims.
• Familiarity with SaaS security practices and public security, privacy, and compliance documentation.
• An analytical mindset and comfort investigating discrepancies, documenting uncertainty, and checking whether a score reflects the underlying evidence.
• Clear written communication and careful documentation habits.
• A self‑starter mindset: you take initiative, adapt quickly, thrive in ambiguity, and enjoy building processes from scratch.

Responsibilities

• Verify vendor research. Check AI-generated findings against saved sources, prioritizing vendors by how many customers use them.
• Build and maintain the vendor library. Research new SaaS vendors, resolve incomplete records, and review significant changes.
• Resolve source‑access gaps. When the pipeline cannot fetch a page, find an accessible source or upload a document.
• Confirm public security claims. Verify evidence for SSO availability, DPAs, subprocessor lists, SOC 2 reports.
• Measure accuracy and calibrate scoring. Compare computed scores with customer ratings, investigate differences.
• Improve research quality. Document recurring errors and give engineering actionable feedback.
• Recommend criteria updates. Propose changes as vendor practices evolve.
• Maintain defensible evidence. Keep findings traceable to sources with dates.
• Develop verification runbooks. Document repeatable steps and escalation paths.

Skills

Vendor security due diligence

Research skills

SaaS security practices

Analytical mindset

Clear written communication

Job description

Oneleet is a fast‑growing security and compliance platform seeking a Vendor Supply Chain Analyst. You will verify AI‑generated research by cross‑checking with saved sources and resolve gaps to ensure evidence supports conclusions.

Engineering handles the AI pipeline, while you provide actionable feedback to improve accuracy and reliability. In this remote‑first role, you will prioritize vendors used by many customers, help shape verification playbooks, and contribute to scalable vendor security