[Hiring] Vendor Supply Chain Analyst @Oneleet

Role Description

Oneleet helps customers understand the security posture of the vendors they use without repeating the same research for every company. Our shared vendor library brings together findings from public sources so customers can make informed decisions faster.

As our Vendor Supply Chain Analyst, you’ll help build and maintain that library. Your core responsibility is verifying AI-generated research: checking findings against saved sources, resolving gaps, and making sure the evidence supports the conclusions. Engineering owns the AI research pipeline; you’ll provide the feedback that makes its output more accurate and useful.

Each shared vendor record has a security posture score. Customer-specific risk scores are calculated separately using each customer’s exposure to that vendor. Your work ensures the underlying vendor research is reliable.

Preliminary research results appear immediately. Human verification follows, with a target turnaround of 1-2 days. The pipeline automatically re-researches vendors every 90 days and routes significant changes for human review.

You’ll help work through an initial backlog of approximately 500–600 vendors, prioritizing those used by the most customers. You’ll also help establish how we measure research accuracy and compare computed scores with existing customer-assigned ratings. This is an opportunity to shape how Oneleet evaluates vendor security at scale.

Key Responsibilities

• Verify vendor research.
• Check AI-generated findings against saved sources, prioritizing vendors by how many customers use them. Correct unsupported claims and distinguish confirmed findings from missing or inconclusive evidence.
• Build and maintain the vendor library.
• Research new SaaS vendors, resolve incomplete records, and review significant changes flagged by the pipeline, including breaches and changes to security practices.
• Resolve source-access gaps.
• Confirm public security claims.
• Measure accuracy and calibrate scoring.
• Improve research quality.
• Recommend criteria updates.
• Maintain defensible evidence.
• Develop verification runbooks.

Qualifications

• Hands-on experience conducting vendor security due diligence or third-party security assessments.
• Strong research skills and the judgment to distinguish evidence from marketing claims.
• Familiarity with SaaS security practices and public security, privacy, and compliance documentation.
• An analytical mindset and comfort investigating discrepancies, documenting uncertainty, and checking whether a score reflects the underlying evidence.
• Clear written communication and careful documentation habits.
• A self-starter mindset: you take initiative, adapt quickly, thrive in ambiguity, and enjoy building processes from scratch.

Bonus Points For

• Experience evaluating AI-generated research or designing human review processes.
• Experience measuring research accuracy, calibrating scoring systems, or building quality assurance processes.
• A background in third-party risk, compliance, or security research.
• Experience helping an early-stage startup grow from Seed to Series A or beyond.
• Scripting or automation skills that help you analyze results or make verification more efficient.

Benefits

• Comprehensive health & wellness benefits
• 20 days PTO per year, plus 8 floating holidays
• Remote work culture
• Team off-sites in stunning places (Amsterdam, Italy, etc.)
• Competitive compensation & equity

Remote-First & Global Hiring

We’re a remote-first company and hire globally in regions where we can legally engage talent directly or via our employer-of-record (EOR) partner. If you’re based outside the U.S., we’ll explore the most compliant hiring arrangement for your location. We make hiring decisions based on merit, skills, and potential regardless of location.

U.S. Hiring & E-Verify

For U.S.-based candidates, Oneleet participates in E-Verify to confirm employment eligibility, in accordance with federal regulations. We are an equal opportunity employer. We do not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other characteristic protected by applicable law.