Security Engineer

Why Blee:

Blee is an AI-first marketing content compliance platform. PayPal, NerdWallet, Brex, and Hims & Hers already trust us. We're YC-backed, founded by an ex-Adobe marketing ops leader and former lawyer, and we're defining a category that didn't exist two years ago—across Fintech, Financial Services, CPG, Travel, and Life Sciences..

With offices in San Francisco and New York, we value in-person work but offer remote-opportunities for the right people. No matter where you join us, you can expect quarterly off-sites and opportunities to join other offices when you feel it’s important. You’ll be joining a team that values clarity, ownership, and shared responsibility—and is focused on building something that genuinely improves how teams work.

The Role

This is a Security Engineer role for someone who wants to own security end-to-end at a fast-growing startup. You will be the first dedicated security hire, responsible for building and maintaining our security posture from SOC 2 compliance to infrastructure hardening to enterprise security reviews.

Growth Trajectory

This role is designed for someone who wants to build a security program from the ground up. As Blee scales, you will grow into a security leadership role, shaping the team and strategy as the company's customer base and regulatory requirements expand.

What You'll Do

• Own and drive compliance certifications – SOC 2 Type II, ISO 27001, and related frameworks (GDPR, CCPA, HIPAA, PCI-DSS)
• Design and operate scalable, secure infrastructure – For real-time systems and AI batch pipelines
• Build security practices and tooling that scale – Not just compliance checkboxes, but engineering-first security that grows with the company
• Harden cloud infrastructure – Access control, secrets management, audit logging, and vulnerability management
• Improve CI/CD pipelines and developer experience – When not on core security work, accelerate developer workflows and occasionally contribute to product features

Who You Are

• Security-obsessed – you think in threat models and attack surfaces by default
• A builder who thrives in ambiguity – you've stood up security programs, not just maintained them
• Comfortable owning ambiguous problems end-to-end without a dedicated security team around you
• Equally at home writing security policies and shipping infrastructure improvements
• Proactive and self-directed; you identify risks before they become incidents
• Excited to be an early security hire and shape the function from scratch

Who You'll Work With & Learn From

You will partner closely with Blee's engineering leadership and infrastructure team. This role gives you direct exposure to how security and infrastructure shape trust and velocity at a high-growth startup.

Requirements

• 4+ years of experience in security engineering or infrastructure security
• Have personally taken at least one company through SOC 2 Type II – you know the audit process, the evidence collection, and the gotchas
• Hands-on with cloud security (AWS, GCP, or Azure) and modern infrastructure tooling (Terraform, Kubernetes, etc.)
• Based in SF or NYC & willing to come into the office 3 days a week

How We Work:

We have offices in New York and San Francisco and value in-person collaboration, but we're open to remote for the right person. Wherever you're based, expect quarterly off-sites and the chance to spend time in our other offices when it matters.

What You’ll Get:

• Competitive salary and equity package
• Quarterly get-togethers
• Fully paid medical, dental, and vision insurance
• Free access to OneMedical
• Company-paid life insurance
• Company-sponsored 401k
• Unlimited PTO (with mandatory 15 days off)
• Financial support for work-adjacent learning opportunities
• Leaders who say “yes” more often than no to whatever helps make you more successful

Blee is an equal opportunity employer and does not discriminate on the basis of race, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition, or any other basis protected by law.

Applicants must be authorized to work for any employer in the U.S. We are unable to sponsor or take over sponsorship of an employment Visa at this time