Vendor Security Research Analyst - Remote, Equity

OpenKrill; United States; Remote; USD 90,000 - 130,000; Full time

Benefits offered by this job

Comprehensive health & wellness benefit

20 days PTO per year, plus 8 floating

Remote work culture

Team off-sites in stunning places (e.g

Competitive compensation & equity

Job summary

Oneleet, a remote-first security and compliance platform, is seeking a Vendor Supply Chain Analyst to verify AI-generated vendor research and ensure evidence supports conclusions. You will prioritize vendors used by many customers and help maintain a growing library of security posture data.

You’ll collaborate with engineering to improve the AI pipeline, measure accuracy, and document repeatable review steps.

Qualifications

• Hands-on experience conducting vendor security due diligence or third-party security assessments.
• Strong research skills and the judgment to distinguish evidence from marketing claims.
• Familiarity with SaaS security practices and public security, privacy, and compliance documentation.
• An analytical mindset and comfort investigating discrepancies, documenting uncertainty, and checking whether a score reflects the underlying evidence.
• Clear written communication and careful documentation habits.
• A self-starter mindset: you take initiative, adapt quickly, thrive in ambiguity, and enjoy building processes from scratch.

Responsibilities

• Verify vendor research. Check AI-generated findings against saved sources, prioritizing vendors by how many customers use them.
• Build and maintain the vendor library. Research new SaaS vendors, resolve incomplete records, and review significant changes flagged by the pipeline.
• Resolve source-access gaps. When the pipeline cannot fetch a page or encounters a login barrier, find an accessible source or manually upload a document.
• Confirm public security claims. Verify evidence for criteria such as SSO availability, published DPAs, subprocessor lists, and SOC 2 reports.
• Measure accuracy and calibrate scoring. Evaluate research accuracy during the proof of concept and beyond, compare scores with customer ratings.
• Improve research quality. Document recurring errors, missed evidence, and ambiguous results, then give engineering actionable feedback.
• Maintain defensible evidence. Keep findings traceable to saved sources, with research dates and clear reasoning.

Skills

Vendor security due diligence

Research skills

SaaS security practices

Analytical mindset

Written communication

Self-starter

Job description

Oneleet, a remote-first security and compliance platform, is seeking a Vendor Supply Chain Analyst to verify AI-generated vendor research and ensure evidence supports conclusions. You will prioritize vendors used by many customers and help maintain a growing library of security posture data.

You’ll collaborate with engineering to improve the AI pipeline, measure accuracy, and document repeatable review steps.