Senior Security Engineer

Employer Name : Chime Financial, Inc. Position : Senior Security Engineer Work location : 101 California Street, San Francisco, CA 94111 United States Wage : $200,000 - $210,000 per year Job Duties : Plan, implement, upgrade, or monitor security measures for the protection of computer networks and information. Assess system vulnerabilities for security risks and propose and implement risk mitigation strategies. Ensure appropriate security controls are in place that will safeguard digital files and vital electronic infrastructure. Respond to computer security breaches and viruses. Collaborate closely with software engineers to enhance security best practices. Provide expert guidance on secure design and conduct thorough risk analysis for web / mobile applications. Lead security initiatives and manage multiple projects. Drive the adoption of secure coding practices and contribute to vulnerability management. Seamlessly integrate security into the CDLC, oversee Chimes bug bounty programs and third-party penetration tests. Conduct internal penetration tests as needed to identify vulnerabilities. Establish safe-by-default guardrails for engineer usage. Present findings and solutions to leadership and peers, highlighting impacts. Partner with engineering for threat modeling of new services and infrastructure. Develop automated systems and monitoring for enforcing security policies and threat detection. Effectively communicate findings and implications to leadership and fellow engineers. Leverage expertise in web / backend app security; bonus for mobile and AWS. Utilize knowledge of at least one programming language (e.g. Python, Java, Ruby, GoLang, JavaScript). Must be available to work on projects at various, unanticipated sites throughout the United States. Telecommuting is permitted. Minimum Requirements : Masters degree in Computer Science, Cybersecurity, Information Security or related field and 3 years of experience in the job offered or in a security engineer-related occupation. Must be available to work on projects at various, unanticipated sites throughout the United States. Telecommuting is permitted. Special Requirements : Position requires at least 2 years of experience in each of the following skills : 1) Utilize knowledge of advanced tools and methodologies for in-depth API security reviews to conduct comprehensive security assessments of web and mobile applications through dynamic and static testing; 2) Utilize knowledge of potential security vulnerabilities and design flaws to conduct detailed threat modeling of applications during the development phase and clearly communicate identified risks and recommend actionable solutions; 3) Utilize knowledge of penetration test engagements end-to-end including internal applications and member-facing applications to target major applications with testing spanning several weeks, culminating in detailed reporting and presentations to executive leadership; 4) Utilize knowledge of assessing network security through offensive security engagements including verifying the effectiveness of existing controls, identifying ways to bypass them, and evaluating the robustness of detective and preventive controls; 5) Utilize experience with developing and automating systems to enforce security policies and monitor threats. The base offered for this role and level of experience is reflected above. Full-time employees are also eligible for a bonus, competitive equity package, and benefits. The actual base salary offered may be higher, depending on your location, skills, qualifications, and experience. To apply : Please email resume to apply@chime.com, and indicate job code JS0094. Proof of authorization to work in U.S. is required if hired. We hire candidates of any race, color, ancestry, religion, sex, national origin, sexual orientation, gender identity, age, marital or family status, disability, Veteran status, and any other status. Chime is proud to be an Equal Opportunity Employer and will consider qualified applicants with criminal histories in a manner consistent with the San Francisco Fair Chance Ordinance, Cook County Ordinance, and consistent with Canadian provincial and federal laws. If you have a disability or special need that requires accommodation, please let us know.