Senior Security Engineer

Security Software Engineer

About

Chime is a financial technology company (not a bank) dedicated to helping people achieve financial progress through helpful, easy, and free core banking services. We empower millions of members to control their finances and reach their goals. We are a team of problem solvers, dreamers, and builders united by our obsession with our members. We foster a culture of grit, determination, boldness, and collaboration, encouraging an owner's mindset and holding ourselves accountable to the highest standards of integrity. This role is hands-on and high-impact, operating across product security, application security, infrastructure security, enterprise security, and security/compliance automation. You will help secure our products and platforms while scaling security through AI, automation, integrations, and continuous monitoring. This role sits at the intersection of engineering, security, and risk/compliance.

Responsibilities

• Participate in projects that reduce security risks and attack surface within our infrastructure and corporate applications.
• Perform security reviews across mobile, backend, cloud, and API systems.
• Conduct penetration testing and threat modeling.
• Embed security into the SDLC.
• Build automation, tooling, and guardrails.
• Streamline vulnerability detection and remediation workflows.
• Partner with engineering, product, and compliance teams.

Requirements

• 2–6+ years in security or software engineering.
• Strong coding skills (Python, Go, Ruby).
• A desire to scale yourself with AI.
• Experience with cloud (AWS/GCP) and APIs.
• Understanding of application and cloud security fundamentals.
• Experience with automation and integrations.
• Strong communication and collaboration skills.
• Experience with AI in security workflows (nice-to-have).
• Terraform or infrastructure-as-code experience (nice-to-have).
• Mobile security experience (iOS/Android) (nice-to-have).
• Pen testing or bug bounty experience (nice-to-have).
• Familiarity with GRC tools and frameworks (nice-to-have).