Why Blee:
Blee is an AI-first marketing content compliance platform. PayPal, NerdWallet, Brex, and Hims & Hers already trust us. We're YC-backed, founded by an ex-Adobe marketing ops leader and former lawyer, and we're defining a category that didn't exist two years ago—across Fintech, Financial Services, CPG, Travel, and Life Sciences..
With offices in San Francisco and New York, we value in-person work but offer remote-opportunities for the right people. No matter where you join us, you can expect quarterly off-sites and opportunities to join other offices when you feel it’s important. You’ll be joining a team that values clarity, ownership, and shared responsibility—and is focused on building something that genuinely improves how teams work.
The Role
This is a Security Engineer role for someone who wants to own security end-to-end at a fast-growing startup. You will be the first dedicated security hire, responsible for building and maintaining our security posture from SOC 2 compliance to infrastructure hardening to enterprise security reviews.
Growth Trajectory
This role is designed for someone who wants to build a security program from the ground up. As Blee scales, you will grow into a security leadership role, shaping the team and strategy as the company's customer base and regulatory requirements expand.
What You'll Do
Own and drive compliance certifications – SOC 2 Type II, ISO 27001, and related frameworks (GDPR, CCPA, HIPAA, PCI-DSS)
Design and operate scalable, secure infrastructure – For real-time systems and AI batch pipelines
Build security practices and tooling that scale – Not just compliance checkboxes, but engineering-first security that grows with the company
Harden cloud infrastructure – Access control, secrets management, audit logging, and vulnerability management
Improve CI/CD pipelines and developer experience – When not on core security work, accelerate developer workflows and occasionally contribute to product features
Who You Are
Security-obsessed – you think in threat models and attack surfaces by default
A builder who thrives in ambiguity – you've stood up security programs, not just maintained them
Comfortable owning ambiguous problems end-to-end without a dedicated security team around you
Equally at home writing security policies and shipping infrastructure improvements
Proactive and self-directed; you identify risks before they become incidents
Excited to be an early security hire and shape the function from scratch
Who You'll Work With & Learn From
You will partner closely with Blee's engineering leadership and infrastructure team. This role gives you direct exposure to how security and infrastructure shape trust and velocity at a high-growth startup.
Requirements
4+ years of experience in security engineering or infrastructure security
Have personally taken at least one company through SOC 2 Type II – you know the audit process, the evidence collection, and the gotchas
Hands-on with cloud security (AWS, GCP, or Azure) and modern infrastructure tooling (Terraform, Kubernetes, etc.)
Based in SF or NYC & willing to come into the office 3 days a week
How We Work:
We have offices in New York and San Francisco and value in-person collaboration, but we're open to remote for the right person. Wherever you're based, expect quarterly off-sites and the chance to spend time in our other offices when it matters.
What You’ll Get:
Competitive salary and equity package
Quarterly get-togethers
Fully paid medical, dental, and vision insurance
Free access to OneMedical
Company-paid life insurance
Company-sponsored 401k
Unlimited PTO (with mandatory 15 days off)
Financial support for work-adjacent learning opportunities
Leaders who say “yes” more often than no to whatever helps make you more successful
Blee is an equal opportunity employer and does not discriminate on the basis of race, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition, or any other basis protected by law.
Applicants must be authorized to work for any employer in the U.S. We are unable to sponsor or take over sponsorship of an employment Visa at this time