Senior Application Security Engineer

• We are looking for a Sr. Full Stack Application Security Engineer with deep expertise in mobile application security to join our Product Security team.
• This role is hands-on and impact driven
• You will work directly with mobile, backend, and platform engineering teams to identify, prevent, and remediate security issues across our iOS, Android, API, and backend systems
• You will operate close to the code and close to the product
• That means reviewing architectures across the stack, influencing secure design decisions early, and helping teams ship features safely without slowing delivery
• This role is for someone who understands how modern distributed systems and mobile apps are built, deployed, and attacked in real-world environments
• While mobile application security is a core focus, you will be part of a team that owns security posture across the full application stack including APIs, backend services, identity and authentication flows, and CI/CD pipelines
• Build and improve security capabilities, automation, and guardrails for mobile applications and backend/API services
• Perform application or API/backend penetration testing
• Identify, triage, and help remediate vulnerabilities across Chime products
• Partner closely with engineering and product teams to embed security into the development lifecycle across mobile apps, APIs, and backend services
• Perform architecture and code reviews across the stack (iOS/Android, APIs, backend) with a focus on secure data storage, authentication, authorization, secure communication, and session/token handling
• Leverage AI to accelerate security workflows (e.g., code review support, triage, threat modeling), and partner with teams building AI-enabled features to define and implement production-grade AI security controls

Benefits

• Physical: We believe in taking care of your physical health, so as a Chimer you’ll get medical, dental, and vision insurance, as well as benefits to support your physical activity, family planning, and all of your little Chimers
• Emotional: We know that staying healthy involves a lot more than doctor’s checkups. We partner with Modern Health to help you navigate your mental health, give monthly Take Care of Yourself Days, and want you to take time off when you need it
• Financial: We want Chimers to save and feel financially supported, so we offer savings plans with competitive matching, as well as access to financial planning and legal assistance so that you can find your financial peace of mind
• Social: We’ll celebrate your milestones together with travel stipends, swag, and high-fives and make sure you’re connected to fellow Chimers through our Chime Resource Groups (CRGs) and company events

• Familiarity with iOS and Android platform security features and limitations
• Hands on experience securing iOS and Android applications in production environments
• Experience with mobile security testing techniques, including static and dynamic analysis
• Strong understanding of mobile threat models and common attack techniques
• 5+ years of experience in application security, with strong hands-on experience across both mobile and backend systems
• Practical coding experience, preferably in Ruby, Go, Python languages
• Ability to clearly communicate security risks, tradeoffs, and remediation guidance to engineering partners