About Oneleet

Oneleet is one of the fastest-growing security and compliance platforms in history. We are on a mission to change the compliance and security industry by making cybersecurity and compliance effective, easy, and painless. We provide a platform that helps companies build, manage, and monitor their cybersecurity programs and achieve compliance standards such as SOC 2 and ISO 27001 efficiently, without cutting corners.

Having just raised a $33 million Series A, we are rapidly growing in customers and employees. Our team has decades of experience in security and compliance. Join our team of opinionated rebels and help us build a category-defining company reshaping the broken and fragmented compliance and cybersecurity industry.

Who we’re looking for:

We value passionate self-starters with a growth mindset and a bias for action and personal accountability. If you love solving hard problems, thrive in ambiguity, and want to make a real impact, you’ll fit right in.

We’re especially drawn to:

• Rebels with a cause — frustrated with the status quo and eager to disrupt it.
• Opinionated (but not obstinate) builders — decisive yet collaborative, who help us move fast.
• Clear communicators — who own their ideas and follow through.

Our mission is simple: make effective cybersecurity painless. We believe cybersecurity should empower, not burden. This belief unites our team and drives every decision we make.

If you’re ready to challenge the status quo and help shape the future of cybersecurity, we’d love to meet you.

As a Product Manager at Oneleet, you'll own the product direction for our new code security suite — a full bundle of capabilities spanning SAST, SCA, DAST, IaC scanning, secrets detection, container scanning, and more. You'll be responsible for sequencing what we build, making sharp tradeoff calls under deadline, and ensuring each module ships against a clearly defined competitive bar.

This is a hands-on PM role at a Series A company. You'll work directly with the founding team, design, and engineering — and you'll be expected to read scanner outputs, understand the security domain, and make calls without needing engineering to translate. You won't be writing exhaustive specs; you'll be making decisions, cutting scope, and shipping.

You'll work closely with customers and design partners to validate priorities, and you'll own the bundle-level competitive positioning against incumbents in the space.

Key Responsibilities:

• Own the roadmap and sequencing for our code security bundles, prioritizing modules across need / want / nice-to-have tiers
• Make scope tradeoff calls quickly under deadline pressure, including what to cut to ship on time
• Work directly with design on mock-ups before engineering begins, providing product direction without requiring detailed specs
• Partner with engineering leadership on technical tradeoffs and sequencing of dependencies across modules
• Run design partner programs and customer interviews to validate priorities and gather feedback on shipped features
• Define the competitive bar for each module based on direct comparison against incumbents in the space
• Coordinate the free tier and Product Hunt launch plan, including which features to give away and how to upsell into paid
• Track usage, success metrics, and engagement for shipped features and feed signal back into the roadmap
• Collaborate with go-to-market on positioning, pricing, and bundle structure as we move from build to launch
• Partner with the Oneleet Intelligence team on AI-powered features integrated into the bundles

Qualifications:

• 5+ years of product management experience, with significant time at security, developer tools, or other technical SaaS companies
• Has shipped at least one product against a named competitor and can walk through the strategy
• Comfortable reading SARIF files, scanner outputs, or similar technical data without needing engineering to translate
• Sharp tradeoff reasoning under deadline — comfortable cutting scope and saying no
• Strong communication skills across customers, engineering, design, and executive stakeholders
• Pragmatic; knows when to make a call with imperfect information rather than wait for certainty
• Scrappy; prior startup experience and not afraid to get their hands dirty
• Comfortable wearing many hats — competitive analysis, GTM input, customer calls, and roadmap all in one week
• Experience in (and thrives in) a fast-moving, start-up engineering environment

Bonus:

• Background in cybersecurity, application security, or related fields
• Experience with bundle-based or platform-based product strategy against an incumbent
• Prior experience with PLG and free-tier-led GTM motions

You should apply if any of the following excite you:

• Owning the product direction for a full code security suite from zero to launch
• Making sharp tradeoff calls and shipping rather than writing exhaustive specs
• Working directly with customers and design partners on a tight feedback loop
• Building product against a clear competitive target and tipping deals with thoughtful bundle design
• Being part of bringing a modern, well-designed product to a category dominated by clunky incumbents

Why Oneleet?

At Oneleet, you’ll join a tight-knit team of rebels redefining the cybersecurity industry. We move fast, own our work, and challenge outdated models to make security effortless and effective for companies.

Here’s what makes us special:

• We value impact over titles, autonomy over micromanagement, and clarity over jargon.
• You’ll tackle meaningful, hard problems with real-world consequences.
• You’ll work with smart, kind, and ambitious teammates who lift each other up.

Perks & Benefits

• Comprehensive health & wellness benefits
• 20 days PTO per year, plus 8 floating holiday
• Remote work culture
• Team off-sites in stunning places (Amsterdam, Italy, etc).
• Competitive compensation & equity

We hire globally and compensate competitively within each market using geographic pay bands. The range for this role reflects a US national baseline. Offers for candidates in higher cost-of-labor markets (e.g., San Francisco, New York, Zurich) may fall at or above the top of the posted range, while offers in other markets are benchmarked to local standards and are lower. Within any range, individual compensation is determined by work location, skills and experience demonstrated through the interview process, and relevant education or training. This posting reflects base salary only and does not include equity or benefits.

Remote-First & Global Hiring

We’re a remote-first company and hire globally in regions where we can legally engage talent directly or via our employer-of-record (EOR) partner. If you’re based outside the U.S., we’ll explore the most compliant hiring arrangement for your location. We make hiring decisions based on merit, skills, and potential regardless of location.

U.S. Hiring & E-Verify

For U.S.-based candidates, Oneleet participates in E-Verify to confirm employment eligibility, in accordance with federal regulations. We are an equal opportunity employer. We do not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other characteristic protected by applicable law.

How we use AI in this Hiring Process

This company uses automated technology, including AI-assisted tools, to assist in reviewing applications, assessing candidate qualifications, and detecting fraudulent submissions. These tools analyze application data and identity signals to support, but not replace, human hiring decisions. All final hiring decisions are made by a human reviewer. Candidates who require accommodation or who wish to request information about how these tools are used, including requesting the bias audit results, may contact recruiting@oneleet.com. This process is conducted in compliance with applicable federal, state, and local laws.

Notice for New York City Residents:

You have a right to take at least 10 business days to decide whether to proceed with submitting your information through this process. By continuing, you confirm your understanding of this notice. If you choose to proceed before the 10-business-day period expires, you are making a knowing and voluntary decision to do so.