Manager, Product Security

Leads a team of security engineers in Chime's Product Security organisation covering cloud, application and AI security. The team works in a flexible pod model, moving between security domains as business priorities change, and works hand in hand with the company's engineering, product and platform groups. The role is based in San Francisco.

The manager owns the security posture of Chime's cloud infrastructure, applications and AI-enabled features, and sets the strategy for securing cloud-native architecture at scale. A growing part of the job is AI: setting guardrails and secure design patterns for using internal and third-party AI systems, and dealing with risks such as prompt injection, data leakage and model or API misuse. The manager puts automated controls in place for identity and access, encryption and application security, covering the secure SDLC and how vulnerabilities are handled, influences platform teams' roadmaps without direct authority, and leads or supports response to incidents in these areas. Growing the team and holding a high technical bar are core responsibilities.

Chime wants five or more years in security engineering with substantial cloud and application security experience, at least two years managing or leading security engineers, strong AWS or GCP and infrastructure-as-code knowledge, and experience with SAST, DAST, SCA, WAF and CNAPP tools. Experience protecting apps that process sensitive or regulated data, and securing or assessing AI and ML systems, is expected, along with the ability to explain security risk in business terms.