Senior Application Security Engineer

Role Overview

Join Chime as a Senior Application Security Engineer to protect and improve the security posture of iOS, Android, API, and backend systems. This is a hands-on role partnering with mobile, backend, and platform engineering teams to prevent, remediate, and embed security into the development lifecycle.

Responsibilities

• Identify, prevent, and remediate security issues across mobile, backend, and platform engineering.
• Perform application and API/backend penetration testing; triage vulnerabilities and help drive remediation.
• Partner with engineering and product teams to embed security into development for mobile apps, APIs, and backend services.
• Build and improve security capabilities and help integrate security practices into delivery.

Requirements

• Deep understanding of how distributed systems and mobile apps are built, deployed, and attacked.
• Clear communication of security risks, tradeoffs, and remediation guidance to engineering partners.
• 5+ years of experience in application security, with strong hands-on experience across mobile and backend.
• Hands-on security testing experience, including static and dynamic analysis.
• Production experience securing iOS and Android applications.
• Familiarity with iOS and Android platform security features and limitations.
• Strong grasp of mobile threat models and common attack techniques.
• Practical coding experience, preferably in Ruby, Go, or Python.

Nice-to-haves

• Strong mobile security testing background across real-world environments (static/dynamic analysis) and platform-specific security nuances.