Skip to content
OneleetOneleetUnited States

Framework Engineer

Develop and maintain compliance frameworks, control libraries, automations, and product improvements that help customers meet security requirements efficiently. The role requires hands-on security program experience, knowledge of major compliance standards, and strong technical fluency with JSON and scripting.

$100k – $150k/yr
RemoteSecurity Engineering

About the job

Responsibilities

  • Research new compliance frameworks and break them into requirements that map to the existing control library.
  • Evaluate the control library for inefficiencies or unnecessary requirements and keep it focused.
  • Build customer automations and documentation to help meet compliance requirements efficiently.
  • Improve the compliance product to make compliance easier for customers.

Requirements

  • Experience building security programs from scratch to meet compliance requirements.
  • Strong working knowledge of major compliance frameworks, including ISO 27001, SOC 2, GDPR, HIPAA, and PCI DSS.
  • Comfort editing structured configuration files such as JSON.
  • Ability to write basic scripts for rule updates and validation checks.
  • Strong logical and technical fluency.
  • Self-starter mindset, adaptability, initiative, and comfort working in ambiguity.

Nice-to-haves

  • Engineering or coding experience.
  • Experience scaling an early-stage startup from Seed through Series A or beyond.

Compensation & Benefits

  • Base salary range: $100,000–$150,000 annually for the U.S. national baseline.
  • Competitive compensation and equity.
  • Comprehensive health and wellness benefits.
  • 20 days of paid time off per year plus 8 floating holidays.
  • Remote work culture.
  • Team off-sites.

Skills

ISO 27001SOC 2GDPRHIPAAPci DssJSONScriptingSecurity ProgramsControl Libraries

Similar jobs

Security Engineering jobs
Metropolis

GRC Analyst II

MetropolisLos Angeles, CA

GRC Analyst responsible for authoring security policies, managing company-wide security awareness training programs, establishing AI governance frameworks, conducting risk assessments on AI tools and models, and ensuring compliance with frameworks like SOC 2 and PCI-DSS. Requires 3+ years in information security GRC or compliance plus a Bachelor's degree.

$100k – $135k/yrOn-site3+ YOESecurity Engineering
Zocdoc

Application Security Engineer

ZocdocUnited States

Application Security Engineer partnering with engineering teams to embed security into the SDLC, triage SAST/SCA findings, provide remediation guidance on OWASP issues, maintain security docs/playbooks, support governance/audits, and integrate GenAI tools while building AI governance guardrails.

$100k – $140k/yrRemoteSecurity Engineering
Harvey

Compliance Analyst

HarveySan Francisco, CA

This Compliance Analyst role at Harvey involves owning and maintaining compliance documentation, coordinating evidence collection, and supporting third-party assessments. The role requires hands-on compliance work, close collaboration with Engineering and Security teams, and a detail-oriented approach to ensure program health and continuous monitoring.

$99k – $149k/yrHybrid3+ YOESecurity Engineering
Cloudflare

Global Physical Security Intelligence Specialist

CloudflareNew York, NY

Develop and operate global physical security systems, controls, and compliance processes across data centers and other facilities. The role manages investigations, risk mitigation, audits, vendor deployments, and cross-functional security initiatives, with approximately 35% travel required.

$102k – $141k/yrOn-siteSecurity Engineering
Chainguard

Security Engineer

ChainguardUnited States

Security Engineer responsible for building detection and prevention controls, automating security operations, conducting threat hunts, and supporting incident response across a remote-first organization. Requires 3+ years of security or software development experience, cloud-native security expertise, and automation skills.

$105k – $123k/yrRemote3+ YOESecurity Engineering