Senior Security Engineer
As a Senior Security Engineer, you will work across product, application, infrastructure, and enterprise security. This role involves hands-on work with code and cloud infrastructure, focusing on reducing security risks, performing security reviews, and building automation and tooling.
About the job
About the role
We are looking for a versatile Security Software Engineer to join our team and operate across product security, application security, infrastructure security, enterprise security, and security/compliance automation. This is a hands-on, high-impact role for someone who enjoys working across the stack—from code and cloud infrastructure to security workflows and compliance systems. You’ll help secure our products and platforms while also improving how we scale security through AI, automation, integrations, and continuous monitoring. This role sits at the intersection of engineering, security, and risk/compliance—requiring both technical depth and the ability to translate ambiguous requirements into practical, reliable solutions.
In this role, you can expect to
- Participate in projects that reduce security risks and attack surface within our infrastructure and corporate applications
- Perform security reviews across mobile, backend, cloud, and API systems
- Conduct penetration testing and threat modeling
- Embed security into the SDLC
- Build automation, tooling, and guardrails
- Streamline vulnerability detection and remediation workflows
- Partner with engineering, product, and compliance teams
To thrive in this role, you have
- 2–6+ years in security or software engineering
- Strong coding skills (Python, Go, Ruby)
- A desire to scale yourself with AI
- Experience with cloud (AWS/GCP) and APIs
- Understanding of application and cloud security fundamentals
- Experience with automation and integrations
- Strong communication and collaboration skills
Nice-to-haves
- Experience with AI in security workflows
- Terraform or infrastructure-as-code experience
- Mobile security experience (iOS/Android)
- Pen testing or bug bounty experience
- Familiarity with GRC tools and frameworks
What we offer for our full-time, regular employees
- Our in-office work policy is designed to keep you connected - with four days a week in the office and Fridays from home for those near one of our offices, plus team and company-wide events depending on location. Whether you’re coming in regularly or are part of our fully remote program, you’ll stay engaged with your work and teammates.
- In-office perks including backup child, elder, and/or pet care, plus a subsidized commuter benefit to support your regular commute
- Competitive salary based on experience
- 401k match plus great medical, dental, vision, life, and disability benefits
- Generous vacation policy and company-wide Chime Days, bonus company-wide paid days off
- 1% of your time off to support local community organizations of your choice
- Annual wellness stipend to use towards eligible wellness related expenses
- Up to 24 weeks of paid parental leave for birthing parents and 12 weeks of paid parental leave for non-birthing parents
- Access to Maven, a family planning tool, with $15k lifetime reimbursement for egg freezing, fertility treatments, adoption, and more.
- In-person and virtual events to connect with your fellow Chimers—think cooking classes, guided meditations, music festivals, mixology classes, paint nights, etc., and delicious snack boxes, too!
- A challenging and fulfilling opportunity to join one of the most experienced teams in FinTech and help millions unlock financial progress
Skills
Python, Go, Ruby, AWS, GCP, APIs, Automation, Terraform, iOS, Android
Similar jobs
Security Engineering jobs
Sardine
United States
Own and scale Sardine’s security compliance and GRC function across major security, privacy, and resilience frameworks, including FedRAMP. The role leads audits, risk management, customer assurance, executive reporting, and a growing compliance team while partnering closely with technical and business stakeholders.
Writer
San Francisco, CABuild detection, threat-hunting, and automated incident-response capabilities for AI infrastructure, including GPU clusters, training pipelines, and model deployments. The role requires substantial security operations experience, strong programming skills, and expertise in distributed systems or AI/ML environments.
Reltio
United States
Senior Cloud Security Engineer responsible for designing, implementing, and assessing security controls across a multi-cloud environment. The role requires 5+ years of security solution implementation experience, strong cloud and cybersecurity expertise, and proficiency in risk assessment, infrastructure as code, and security technologies.
GitLab
United States
Senior Security Compliance Engineer supporting public-sector compliance programs, regulated customers, audits, certifications, and FedRAMP continuous monitoring. Requires 5+ years in GRC or cybersecurity, compliance automation experience, cloud familiarity, and U.S. citizenship and residency.
GitLab
United States
Owns technology compliance and security assurance controls across corporate and business systems, aligning evidence for SOX, SOC 2, ISO, regulatory, and contractual obligations. The role requires 5+ years in compliance, audit, security, or IT, strong control-testing experience, and a bachelor's degree or equivalent.