Vendor Security Research Analyst

Oneleet (Yc S22); United States; À distance; USD 70 000 - 110 000; Plein temps

Résumé du poste

Oneleet seeks a Vendor Supply Chain Analyst to verify AI-generated vendor research and ensure evidence supports conclusions. You will check findings against saved sources, resolve gaps, and improve the AI research pipeline for reliability.

You will tackle a backlog of 500–600 vendors, prioritizing by customer usage, building a solid vendor library, and documenting sources for auditability at scale.

Qualifications

• Hands-on experience conducting vendor security due diligence or third-party security assessments.
• Strong research skills and the judgment to distinguish evidence from marketing claims.
• Familiarity with SaaS security practices and public security, privacy, and compliance documentation.
• An analytical mind.

Responsabilités

• Verify vendor research by checking AI findings against saved sources and prioritizing vendors by customer use.
• Build and maintain the vendor library, researching new SaaS vendors and flagging changes.
• Resolve source-access gaps by finding accessible sources or uploading documents.
• Confirm public security claims (SSO, DPAs, subprocessor lists, SOC 2 reports).
• Measure accuracy and calibrate scoring by comparing to customer ratings.
• Improve research quality by documenting errors and feeding back to engineering.
• Recommend criteria updates as vendor practices evolve.
• Maintain defensible evidence with dates and sources for auditability.
• Develop verification runbooks with repeatable review steps.

Connaissances

Vendor security due diligence

Research skills

SaaS security knowledge

Analytical mind

Description du poste

Oneleet seeks a Vendor Supply Chain Analyst to verify AI-generated vendor research and ensure evidence supports conclusions. You will check findings against saved sources, resolve gaps, and improve the AI research pipeline for reliability.

You will tackle a backlog of 500–600 vendors, prioritizing by customer usage, building a solid vendor library, and documenting sources for auditability at scale.