Senior Application Security Engineer

A senior full-stack application security engineer on Chime's Product Security team, specialising in mobile security while covering APIs, backend services, authentication flows and CI/CD. The role is hybrid in San Francisco.

The engineer builds security automation and guardrails for the iOS and Android apps and backend services, pen tests applications and APIs, triages and drives fixes for vulnerabilities, and reviews architecture and code with attention to data storage, authentication, authorisation and token handling. The role also uses AI to speed up security work and helps teams building AI features put solid controls in place. Chime wants five or more years in application security with hands-on mobile and backend experience, knowledge of mobile threat models and testing, and coding skills in Ruby, Go or Python.