Security Engineering Manager

Blend; United States; On-site; USD 152,000 - 179,000; Full time

Benefits offered by this job

Equity: RSUs in Blend stock

Health benefits

401(k) plan

Job summary

Blend is seeking a manager of security engineering to lead the team responsible for securing our product, platform, and software development lifecycle. You will shape the team's roadmap, oversee hiring, and drive technical execution of security frameworks and tooling.

Collaborate with security, product, platform, and infrastructure teams to embed security up and down the lifecycle, focusing on threat modeling, adversarial testing, and secure coding in Go and TypeScript/JavaScript with Linux

Qualifications

• Experience leading security engineering teams and shaping security roadmaps.
• Ability to perform threat modeling and translate findings into actionable engineering work.
• Strong coding skills in Go and TypeScript/JavaScript; proficient with Linux tooling.

Responsibilities

• Own day-to-day operations of the security engineering team and its roadmap.
• Lead red-teaming efforts and integrate adversarial testing into the SDLC.
• Collaborate with product, platform, and infrastructure teams to embed security practices across the development lifecycle.

Skills

Penetration testing

Threat modeling

Leadership

Secure coding

STRIDE

SAST/DAST

Go

TypeScript/JavaScript

Linux

Tools

Burp Suite

OWASP ZAP

SAST/DAST tooling

Job description

Blend is a diverse team of problem solvers who believe that the world's financial resources should be more accessible. Our cloud banking platform is used by Wells Fargo, U.S. Bank, and over 330 other financial services firms to acquire more customers, increase productivity, and deliver end-to-end digital experiences. Our software enables our customers to process an average of more than $5 billion in loans per day, making it possible for consumers to reach their financial goals faster and lead better lives. Come do work that matters.

About the role

As the manager of security engineering, you'll own the day-to-day operations of a team dedicated to the security of our product, platform, and overall software development lifecycle. You'll manage and help shape the security engineering team's roadmap, its overall hiring and expansion, and its overall technical execution. In addition to thinking of the defensive nature of our SDLC, you'll also orchestrate our red teaming capabilities and ensure we incorporate adversarial testing into our development pipeline. Aside from growing and directing the team through active and empathetic coaching, you'll also be able to focus on deep, technical work in order to help ship impactful security frameworks, methods, and tooling across the organization. You'll partner closely with the rest of the security team, as well as the broader product, platform, and infrastructure teams in order to embed security up and down the software development lifecycle.

What you'll bring

In addition to general management ability and a proactive leadership philosophy, you should bring demonstrated web application penetration testing ability, allowing you to scope and execute assessments and threat models against a modern web stack. You should be proficient in Burp Suite, OWASP ZAP, or similar in order to perform in-the-trenches pen testing work when needed. You should be able to chain findings together into a meaningful threat narrative and write up results in a way that mobilizes engineers to act. You should have strong secure coding capabilities across TypeScript/JavaScript and Go, strong fluency with Linux systems and tooling, and practical experience threat modeling using STRIDE to help guide architecture-level decisions. You should be familiar with SAST/DAST tooling and how to use their signals to drive meaningful risk reduction.

You'll also help define our approach to AI security: evaluating risks introduced by LLM-backed features, agentic systems, and MCP servers, and establishing the scalable review patterns and guardrails we need to keep our engineers shipping secure software.

Experience we value

Prior experience in financial services or another highly regulated industry is a plus. You should be comfortable making decisions at the intersections of compliance, regulatory obligations, and the mission of the business. Above all, we're looking for someone who levels-up the people around them, both technically and collaboratively, and who sees good security as the potential to improve the productivity of a company while hindering the productivity of a threat actor.

Compensation:

• Base Salary Range: $152,000 - $179,000 (This applies to full time hires. Final offer determined by multiple factors, including but not limited to function, level, geographic location, job related knowledge, skills, and experience.)
• Bonus (if applicable):Eligibility is contingent upon both company performance against established goals and achievement of individual performance objectives.
• Equity :Meaningful Restricted Stock Units in public company stock (NYSE: BLND) so you share in Blend’s long-term growth and success.

Our Benefits at a Glance

We offer a comprehensive and competitive benefits package designed to support your health and work-life balance.

Health & Wellbeing

• We offer medical, dental, and vision benefits, with a generous employer contribution that helps keep your medical insurance costs low.
• Company-paid life, short-term, and long-term disability coverage
• Generous PTO, holidays, and maternity/parental leave
• Employee Assistance Program (EAP): mental health, legal, childcare & eldercare, financial planning, college search, and more
• Voluntary benefits: accident, critical illness, hospital indemnity, identity theft, and legal insurance
• Monthly wellness stipend for fitness, mental health, and well-being
• Additional perks: Milk Stork, pet insurance, and paid volunteer time off

Growth & Future

• 401(k) retirement plan with company match
• Pre-tax savings: healthcare & dependent care FSAs, Limited Purpose FSA, and HSA