Application Security Engineer

About the role

ABOUT ONELEET

"Defenders think in lists, but attackers think in graphs." - Bryan Onel, Oneleet Co-Founder & CEO

Oneleet's mission is to make effective cybersecurity painless. We're building the all-in-one security and compliance platform: real security first, compliance as the result.

We recently closed a $33M Series A led by Dawn Capital. We're one of the fastest growing security companies in history, and we're only getting started. Our team of opinionated rebels has decades of security and compliance experience, with vision and expertise, reshaping the broken and fragmented compliance and cybersecurity industry.

If you’re ready to challenge the status quo and help shape the future of cybersecurity, we’d love to meet you.

WHO WE’RE LOOKING FOR:

We value passionate self-starters with a growth mindset and a bias for action and personal accountability. If you love solving hard problems, thrive in ambiguity, and want to make a real impact, you’ll fit right in.

We’re especially drawn to:

- Rebels with a cause — frustrated with the status quo and eager to disrupt it.

- Opinionated (but not obstinate) builders — decisive yet collaborative, who help us move fast.

- Clear communicators — who own their ideas and follow through.

Our mission is simple: make effective cybersecurity painless. We believe cybersecurity should empower, not burden. This belief unites our team and drives every decision we make.

As an Application Security Engineer at Oneleet, you'll bring security depth to our product engineering teams as we expand our cybersecurity platform. You'll own the security judgment layer that sits between raw tooling output and what our customers actually see — deciding what to surface, what to suppress, and how to make findings genuinely useful rather than noisy.

This is a hands-on, security-first engineering role at a Series A startup. You'll work closely with backend and fullstack engineers on how findings are stored, enriched, and presented, and you'll partner with product and design on what to build next. You'll be the security voice in product and engineering decisions, and you'll be empowered to push back when security judgment requires it.

You'll work directly with customers — security teams using the platform day-to-day — to understand what they actually need, and iterate quickly based on their feedback.

KEY RESPONSIBILITIES:

- Own the integration, configuration, and output quality of security tooling that powers our platform

- Tune outputs to maximize signal and minimize noise — decide what to surface, what to suppress, and what to enrich

- Design rules, severity scoring, and triage flows that make findings actionable rather than overwhelming

- Build the security judgment layer on top of underlying tooling — context-aware prioritization and exploitability reasoning

- Partner with engineers on how findings are presented in the UI and how remediation flows work