Senior Application Security Engineer

Responsibilities

Build security capabilities, automation, and guardrails for mobile applications and backend/API services. Perform application and API/backend penetration testing. Identify, triage, and help remediate vulnerabilities across Chime products. Partner with engineering and product teams to embed security into the development lifecycle. Conduct architecture and code reviews across iOS, Android, APIs, and backend systems. Assess secure data storage, authentication, authorization, secure communication, and session/token handling. Use AI to accelerate security workflows and help implement security controls for AI-enabled features.

Requirements

5+ years of application security experience with hands-on experience across mobile and backend systems. Hands-on experience securing iOS and Android applications in production environments. Strong understanding of mobile threat models and common attack techniques. Experience with mobile security testing techniques, including static and dynamic analysis. Familiarity with iOS and Android platform security features and limitations. Practical coding experience, preferably in Ruby, Go, or Python. Ability to communicate security risks, tradeoffs, and remediation guidance clearly to engineering partners.

Benefits

Base salary ranging from $213,000 to $295,000, plus eligibility for a bonus, equity package, and benefits. Hybrid work policy with four days per week in the office and Fridays from home near company offices; a fully remote program is also available. Backup child, elder, and pet care and subsidized commuter benefits for eligible employees. Comprehensive health, financial, and wellbeing benefits. Generous vacation policy and company-wide paid days off. One percent of time off may be used to support local community organizations. Annual wellness stipend. Up to 22 weeks of paid parental leave for birthing parents and 12 weeks for non-birthing parents. Family planning reimbursement.