Penetration Testing Coordinator
About Oneleet
Oneleet is one of the fastest-growing security and compliance platforms in history. We are on a mission to change the compliance and security industry by making cybersecurity and compliance effective, easy, and painless. We provide a platform that helps companies build, manage, and monitor their cybersecurity programs and achieve compliance standards such as SOC 2 and ISO 27001 efficiently, without cutting corners.
Having just raised a $33 million Series A, we are rapidly growing in customers and employees. Our team has decades of experience in security and compliance. Join our team of opinionated rebels and help us build a category-defining company reshaping the broken and fragmented compliance and cybersecurity industry.
Who we’re looking for
We value passionate self-starters with a growth mindset and a bias for action and personal accountability. If you love solving hard problems, thrive in ambiguity, and want to make a real impact, you’ll fit right in.
We’re especially drawn to:
Rebels with a cause — frustrated with the status quo and eager to disrupt it.
Opinionated (but not obstinate) builders — decisive yet collaborative, who help us move fast.
Clear communicators — who own their ideas and follow through.
Our mission is simple: make effective cybersecurity painless. We believe cybersecurity should empower, not burden. This belief unites our team and drives every decision we make.
If you’re ready to challenge the status quo and help shape the future of cybersecurity, we’d love to meet you.
We’re looking for a tech-savvy relationship builder to lead our customers through every stage of their penetration testing journey with us. In this role, you’ll own pentest engagements from start to finish- running scoping calls, coordinating test execution, and acting as the trusted point of contact for clients. You’ll translate complex security work into clear guidance, answer questions along the way, and ensure every deliverable lands smoothly and on time.
This role is a great fit for a junior pentester who’s eager to grow and gain exposure to the business side of security. You’ll sharpen your technical skills while also building client relationships, learning how engagements are scoped, managed, and delivered, and seeing firsthand how security work drives real business outcomes. If you enjoy collaborating with people, explaining technical concepts in a clear way, and want a well-rounded path to advance your career, this position offers hands-on experience and meaningful growth opportunities.
Key Responsibilities
Lead scoping calls with clients to understand requirements, timelines, and target environments
Serve as primary point of contact for clients throughout the engagement lifecycle
Manage project schedules and ensure deliverables are completed on time
Answer client questions regarding testing approach, findings, and remediation guidance
Coordinate internal resources and communicate project status to stakeholders
Facilitate kickoff meetings, status updates, and closeout discussions
Handle engagement logistics including access provisioning, scheduling, and documentation
Gather and organize pre-engagement information (IP ranges, credentials, rules of engagement)
Ensure client satisfaction and address concerns promptly and professionally
Support quality assurance processes to ensure consistent deliverable standards
Assist pentesters on complex engagements and act as the point contact for escalated technical issues as needed
Stay current on emerging threats, vulnerabilities, and testing methodologies
Requirements
1-3 years of experience in penetration testing, security assessments, or related cybersecurity role
Previous client-facing or customer service experience preferred
Understanding of networking fundamentals
Familiarity with operating systems and command line interfaces
Basic knowledge of web application technologies and common attack vectors
Ability to read and understand basic code
Strong written and verbal communication skills with ability to explain technical concepts to non-technical audiences