Senior Application Security Engineer (San Francisco)

Chime is a fintech company offering banking services and personal loans to millions of members. We are looking for a Sr. Full Stack Application Security Engineer with deep expertise in mobile application security to join our Product Security team.

Key responsibilities

• Build and improve security capabilities, automation, and guardrails for mobile applications and backend/API services
• Perform application or API/backend penetration testing
• Identify, triage, and help remediate vulnerabilities across Chime products
• Partner closely with engineering and product teams to embed security into the development lifecycle across mobile apps, APIs, and backend services
• Perform architecture and code reviews across the stack (iOS/Android, APIs, backend) with a focus on secure data storage, authentication
• Leverage AI to accelerate security workflows (e.g., code review support, triage, threat modeling)

Requirements

• 5+ years of experience in application security, with strong hands-on experience across both mobile and backend systems
• Hands on experience securing iOS and Android applications in production environments
• Strong understanding of mobile threat models and common attack techniques
• Experience with mobile security testing techniques, including static and dynamic analysis
• Familiarity with iOS and Android platform security features and limitations
• Practical coding experience, preferably in Ruby, Go, Python languages

Location and schedule

• Onsite in San Francisco, California

Salary and benefits

US base salary $213,000 to $295,000 a year. Chime also offers benefits; the full list is on the posting.

How to apply

Apply on the company's own site.