We are looking for a Sr. Full Stack Application Security Engineer with deep expertise in mobile application security to join our Product Security team.
You will work directly with mobile, backend, and platform engineering teams to identify, prevent, and remediate security issues across iOS, Android, API, and backend systems.
You will review architectures across the stack, influence secure design decisions early, and help teams ship features safely.
Responsibilities
Build and improve security capabilities, automation, and guardrails for mobile applications and backend/API services
Perform application or API/backend penetration testing
Identify, triage, and help remediate vulnerabilities across Chime products
Partner closely with engineering and product teams to embed security into the development lifecycle
Perform architecture and code reviews across the stack (iOS/Android, APIs, backend) with a focus on secure data storage, authentication, authorization, secure communication, and session/token handling
Leverage AI to accelerate security workflows and define production-grade AI security controls
Requirements
5+ years of experience in application security, with strong hands-on experience across both mobile and backend systems
Hands-on experience securing iOS and Android applications in production environments
Strong understanding of mobile threat models and common attack techniques
Experience with mobile security testing techniques, including static and dynamic analysis
Familiarity with iOS and Android platform security features and limitations
Practical coding experience, preferably in Ruby, Go, Python
Ability to clearly communicate security risks, tradeoffs, and remediation guidance to engineering partners
Conditions
Base salary: $213,000 – $295,000 per year
Eligible for bonus, competitive equity package, and benefits
In-office work policy: four days a week in the office and Fridays from home for those near one of our offices
Comprehensive health, financial, and wellbeing benefits
Generous vacation policy and company-wide paid days off
Up to 22 weeks of paid parental leave for birthing parents and 12 weeks for non-birthing parents