# Application Security Engineer at Oneleet

- Company: Oneleet
- What the company does: Looking to obtain a SOC 2 report or an ISO 27001 certification? Oneleet is the only all-in-one platform for both real world security AND compliance. Talk to us about SOC 2, HIPAA, ISO 27001, PCI, GDPR & more. Backed by Y Combinator.
- Company website: https://www.oneleet.com/?utm_source=yc&utm_medium=bookface
- Type: Startups (AI role)
- Level: Mid level
- Location: US/EU - Remote
- Work setup: Remote
- Pay: $160K to $220K base salary per year (USD)
- Posted: 2026-05-28
- Apply by: 2026-10-08
- Apply: https://jobs.ashbyhq.com/oneleet/e3859be5-74ea-4fb5-a1c3-7e54626b1dee
- Page: https://www.1752.vc/careers/jobs/oneleet-application-security-engineer/

## About the role

Own the integration, configuration, and output quality of security tooling that powers our platform Tune outputs to maximize signal and minimize noise — decide what to surface, what to suppress, and what to enrich

## What they're looking for

- We value passionate self-starters with a growth mindset and a bias for action and personal accountability. If you love solving hard problems, thrive in ambiguity, and want to make a real impact, you’ll fit right in
- 5+ years of application security experience, with significant time shipping security products
- Strong programming skills in at least one of Go, Python, or TypeScript — this is a product engineering role with security depth, not security operations
- Hands-on experience tuning security tooling for production use — reducing false positives, building suppression logic, designing severity models
- Understanding of vulnerability research, CVE/CWE taxonomies, and exploit reasoning
- Has worked through what makes a security finding actually actionable vs. just technically true

Tags: Engineering/Dev