Senior Application Security Engineer

About the role

Chime Financial, Inc is seeking a Senior Application Security Engineer to join its Product Security team, with a core focus on mobile application security. This hands-on role partners with mobile, backend, and platform engineering teams to identify, prevent, and remediate security issues across iOS, Android, APIs, and backend systems.

You will work close to the code and product, review architectures, influence secure design decisions early, and help teams ship safely without slowing delivery. The team's security scope includes the full application stack, identity and authentication flows, and CI/CD pipelines.

Responsibilities

• Build and improve security capabilities, automation, and guardrails for mobile applications and backend/API services.
• Perform application and API/backend penetration testing.
• Identify, triage, and help remediate vulnerabilities across Chime products.
• Partner with engineering and product teams to embed security into the development lifecycle.
• Perform architecture and code reviews across iOS, Android, APIs, and backend systems, focusing on secure data storage, authentication, authorization, secure communication, and session/token handling.
• Use AI to accelerate security workflows, including code review support, triage, and threat modeling.
• Partner with teams building AI-enabled features to define and implement production-grade AI security controls.

Qualifications

• At least 5 years of application security experience, with strong hands-on experience across mobile and backend systems.
• Hands-on experience securing production iOS and Android applications.
• Strong understanding of mobile threat models and common attack techniques.
• Experience with mobile security testing, including static and dynamic analysis.
• Familiarity with iOS and Android platform security features and limitations.
• Practical coding experience, preferably in Ruby, Go, or Python.
• Ability to clearly communicate security risks, tradeoffs, and remediation guidance to engineering partners.

Location and compensation

• Hybrid role in San Francisco, California.
• For employees near an office, the stated policy is four days per week in the office and Fridays from home.
• Annual base salary range: $213,000–$295,000 USD. Actual base salary may be higher depending on location, skills, qualifications, and experience.
• Full-time employees may also be eligible for bonuses, competitive equity, and benefits.

Benefits

• Comprehensive health, financial, and wellbeing benefits.
• Backup child, elder, and pet care, plus subsidized commuter benefits for eligible employees.
• Generous vacation and company-wide paid days off.
• 1% of time off to support local community organizations.
• Annual wellness stipend for eligible expenses.
• Up to 22 weeks of paid parental leave for birthing parents and 12 weeks for non-birthing parents.
• Family planning reimbursement.
• Team and company-wide events depending on location.

Application accommodations

Applicants needing accommodation at any stage of the application process can contact accommodations@chime.com.