Senior Application Security Engineer

Responsibilities

• Build security capabilities, automation, and guardrails for mobile applications and backend/API services.
• Perform application and API/backend penetration testing.
• Identify, triage, and help remediate vulnerabilities across Chime products.
• Partner with engineering and product teams to embed security into the development lifecycle.
• Conduct architecture and code reviews across iOS, Android, APIs, and backend systems.
• Assess secure data storage, authentication, authorization, secure communication, and session/token handling.
• Use AI to accelerate security workflows and help implement security controls for AI-enabled features.

Requirements

• 5+ years of application security experience with hands-on experience across mobile and backend systems.
• Hands-on experience securing iOS and Android applications in production environments.
• Strong understanding of mobile threat models and common attack techniques.
• Experience with mobile security testing techniques, including static and dynamic analysis.
• Familiarity with iOS and Android platform security features and limitations.
• Practical coding experience, preferably in Ruby, Go, or Python.
• Ability to communicate security risks, tradeoffs, and remediation guidance clearly to engineering partners.

Benefits

• Base salary ranging from $213,000 to $295,000, plus eligibility for a bonus, equity package, and benefits.
• Hybrid work policy with four days per week in the office and Fridays from home near company offices; a fully remote program is also available.
• Backup child, elder, and pet care and subsidized commuter benefits for eligible employees.
• Comprehensive health, financial, and wellbeing benefits.
• Generous vacation policy and company-wide paid days off.
• One percent of time off may be used to support local community organizations.
• Annual wellness stipend.
• Up to 22 weeks of paid parental leave for birthing parents and 12 weeks for non-birthing parents.
• Family planning reimbursement.