Chime is hiring a Senior Security Engineer

We are looking for a versatile Security Software Engineer to join our team and operate across product security, application security, infrastructure security, enterprise security, and security/compliance automation. This is a hands-on, high-impact role for someone who enjoys working across the stack—from code and cloud infrastructure to security workflows and compliance systems. You’ll help secure our products and platforms while also improving how we scale security through AI, automation, integrations, and continuous monitoring. This role sits at the intersection of engineering, security, and risk/compliance—requiring both technical depth and the ability to translate ambiguous requirements into practical, reliable solutions. The base salary offered for this role and level of experience will begin at $130,000 and go up to $250,000. Full-time employees are also eligible for a bonus, competitive equity package, and benefits. The actual base salary offered may be higher, depending on your location, skills, qualifications, and experience. In this role, you can expect to - Participate in projects that reduce security risks and attack surface within our infrastructure and corporate applications - Perform security reviews across mobile, backend, cloud, and API systems - Conduct penetration testing and threat modeling - Embed security into the SDLC - Build automation, tooling, and guardrails - Streamline vulnerability detection and remediation workflows - Partner with engineering, product, and compliance teams To thrive in this role, you have - 2–6+ years in security or software engineering - Strong coding skills (Python, Go, Ruby) - A desire to scale yourself with AI - Experience with cloud (AWS/GCP) and APIs - Understanding of application and cloud security fundamentals - Experience with automation and integrations - Strong communication and collaboration skills Nice-to-haves - Experience with AI in security workflows - Terraform or infrastructure-as-code experience - Mobile security experience (iOS/Android) - Pen testing or bug bounty experience - Familiarity with GRC tools and frameworks