Security Engineering Manager

Blend

6d•$152,000 - $179,000

About The Position

As the manager of security engineering, you'll own the day-to-day operations of a team dedicated to the security of our product, platform, and overall software development lifecycle. You'll manage and help shape the security engineering team's roadmap, its overall hiring and expansion, and its overall technical execution. In addition to thinking of the defensive nature of our SDLC, you'll also orchestrate our red teaming capabilities and ensure we incorporate adversarial testing into our development pipeline. Aside from growing and directing the team through active and empathetic coaching, you'll also be able to focus on deep, technical work in order to help ship impactful security frameworks, methods, and tooling across the organization. You'll partner closely with the rest of the security team, as well as the broader product, platform, and infrastructure teams in order to embed security up and down the software development lifecycle. You'll also help define our approach to AI security: evaluating risks introduced by LLM-backed features, agentic systems, and MCP servers, and establishing the scalable review patterns and guardrails we need to keep our engineers shipping secure software.

Requirements

General management ability and a proactive leadership philosophy.
Demonstrated web application penetration testing ability, allowing you to scope and execute assessments and threat models against a modern web stack.
Proficiency in Burp Suite, OWASP ZAP, or similar for in-the-trenches pen testing work.
Ability to chain findings together into a meaningful threat narrative and write up results in a way that mobilizes engineers to act.
Strong secure coding capabilities across TypeScript/JavaScript and Go.
Strong fluency with Linux systems and tooling.
Practical experience threat modeling using STRIDE to help guide architecture-level decisions.
Familiarity with SAST/DAST tooling and how to use their signals to drive meaningful risk reduction.

Nice To Haves

Prior experience in financial services or another highly regulated industry.
Comfortable making decisions at the intersections of compliance, regulatory obligations, and the mission of the business.

Responsibilities

Own the day-to-day operations of a team dedicated to the security of our product, platform, and overall software development lifecycle.
Manage and help shape the security engineering team's roadmap, its overall hiring and expansion, and its overall technical execution.
Orchestrate red teaming capabilities and ensure adversarial testing is incorporated into the development pipeline.
Grow and direct the team through active and empathetic coaching.
Focus on deep, technical work to help ship impactful security frameworks, methods, and tooling across the organization.
Partner closely with the rest of the security team, as well as the broader product, platform, and infrastructure teams to embed security up and down the software development lifecycle.
Define our approach to AI security, evaluating risks introduced by LLM-backed features, agentic systems, and MCP servers.
Establish scalable review patterns and guardrails for AI security.

Benefits

Medical, dental, and vision benefits with a generous employer contribution.
Company-paid life, short-term, and long-term disability coverage.
Generous PTO, holidays, and maternity/parental leave.
Employee Assistance Program (EAP) for mental health, legal, childcare & eldercare, financial planning, college search, and more.
Voluntary benefits: accident, critical illness, hospital indemnity, identity theft, and legal insurance.
Monthly wellness stipend for fitness, mental health, and well-being.
Milk Stork.
Pet insurance.
Paid volunteer time off.
401(k) retirement plan with company match.
Pre-tax savings: healthcare & dependent care FSAs, Limited Purpose FSA, and HSA.