About the role

We are seeking a Senior Security Engineer to build and lead our Offensive Security program. In this role, you will attack Chime’s services, applications, and infrastructure to discover security issues and report them to our internal technology teams. This position will offer you the opportunity to grow your technical and leadership skills while being part of a collaborative and dynamic team that finds joy in problem-solving and innovating together at Chime.

The ideal candidate will be an offensive cybersecurity professional with a passion for analyzing codebases, testing hypotheses, and designing tools to impact web applications and their infrastructure. This Engineer will work closely with teams throughout Information Security, as well as provide technical leadership and advice to teams and leaders throughout Chime. You will be in direct contact with teams in a variety of business verticals, giving you first-hand knowledge about how Chime is built and how it operates at a deep, technical level. Additionally, you will use the knowledge you gain about Chime to find new ways to break services, processes, and infrastructure throughout the company.

We're a small, dedicated team that’s always thinking of innovative ways to tackle challenging security problems. We take on ambitious projects that have a significant impact on our members and help build a strong security culture within our company. The team encourages discussing the problems we are solving, the methods we use, and celebrating our accomplishments through public blogs and at conferences. If these resonate with the way you work, we'd love to hear from you.

The base salary offered for this role and level of experience will begin at $157,590 and up to $218,900. Full-time employees are also eligible for a bonus, competitive equity package, and benefits. The actual base salary offered may be higher, depending on your location, skills, qualifications, and experience.

In this role, you can expect to

  • Independently manage complete red team exercises.
  • Partner with Engineering, Product, IT, and other business functions to drive security improvement across the organization
  • Research emerging attack vectors, vulnerabilities and techniques
  • Use your offensive skills to identify weaknesses and build defenses against those who may point their attacks at Chime
  • Develop custom payloads and exploits
  • Emulate adversaries like cybercriminals and insider threats by attacking web applications, cloud platforms and supporting services(Kubernetes / Container Orchestration platforms etc.)
  • Partner closely with detection engineers to build high fidelity alerting based on emerging attack vectors and tactics, techniques and procedures
  • Participate in purple-team exercises to mature the security program

What are we looking for

  • 4+ years of combined experience in either an offensive security, red teaming, or application security role.
  • Experience in conducting surreptitious cloud based attacks
  • Experience with developing custom tools and payloads which bypass defensive products, and remain undetected in a mature network environment
  • Ability to perform unsupervised red team engagements and experience with performing adversarial simulation
  • Ability to explain vulnerabilities and weaknesses to non-technical partners
  • (Nice to have) Relevant certifications: OSCP (Offensive Security Certified Professional), OSCE (Offensive Security Certified Expert) and OSEE (Offensive Security Exploitation Expert), Certified Red Team Operator (CRTO), GIAC Red Team Professional certification (GRTP)

A little about us

At Chime, we believe that everyone can achieve financial progress. We’re passionate about developing solutions and services to empower people to succeed. Every day, we start with empathy for our members and stay motivated by our desire to support them in ways that make a meaningful difference.

We created Chime—a financial technology company, not a bank*-- founded on the premise that basic banking services should be helpful, transparent, and fair. Chime helps unlock the access and ability our members need to overcome the systemic barriers that block them from moving forward. By providing members with access to liquidity, rewards, and credit building, our easy-to-use tools and intuitive platforms give members the ability to have more control over their money and to take action toward achieving their financial ambitions.

So far, we’re well-loved by our members and proud to have helped millions of people unlock financial progress, whether they started a savings account, bought their first car or home, opened a business, or went to college. Every day, we’re inspired by our members’ dreams and successes, big and small.

We’re uniting everyday people to unlock their financial progress—will you join us?

*Chime partners with The Bancorp Bank and Stride Bank, N.A., Members FDIC, that power the bank accounts used by Chime Members.

What we offer

  • 🏢 A thoughtful hybrid work policy that combines in-office days and trips to team and company-wide events depending on location to ensure you stay connected to your work and teammates, whether you’re local to one of our offices or remote
  • 💻 Hybrid work perks, like UrbanSitter and Kinside for backup child, elder and/or pet care, as well as a subsidized commuter benefit
  • 💰 Competitive salary based on experience
  • ✨ 401k match plus great medical, dental, vision, life, and disability benefits
  • 🏝 Generous vacation policy and company-wide Take Care of Yourself Days
  • 🫂 1% of your time off to support local community organizations of your choice
  • 🧠 Mental health support with therapy and coaching through Modern Health
  • 👶 16 weeks of paid parental leave for all parents and an additional 6-8 weeks for birthing parents
  • 👪 Access to Maven, a family planning tool, with up to $10k in reimbursement for egg freezing, fertility treatments, adoption, and more.
  • 🎉 In-person and virtual events to connect with your fellow Chimers—think cooking classes, guided meditations, music festivals, mixology classes, paint nights, etc., and delicious snack boxes, too!
  • 💚 A challenging and fulfilling opportunity to join one of the most experienced teams in FinTech and help millions unlock financial progress

We know that great work can’t be done without a diverse team and inclusive environment. That’s why we specifically look for individuals of varying strengths, skills, backgrounds, and ideas to join our team. We believe this gives us a competitive advantage to better serve our members and helps us all grow as Chimers and individuals.

We hire candidates of any race, color, ancestry, religion, sex, national origin, sexual orientation, gender identity, age, marital or family status, disability, Veteran status, and any other status. Chime is proud to be an Equal Opportunity Employer and will consider qualified applicants with criminal histories in a manner consistent with the San Francisco Fair Chance Ordinance, Cook County Ordinance, and consistent with Canadian provincial and federal laws. If you have a disability or special need that requires accommodation, please let us know.

To learn more about how Chime collects and uses your personal information during the application process, please see the Chime Applicant Privacy Notice.

#LI-SB1

Apply for this Job

* Required
resume chosen  
Dropbox Google Drive
(File types: pdf, doc, docx, txt, rtf)
Cancel
cover_letter chosen  
Dropbox Google Drive
(File types: pdf, doc, docx, txt, rtf)
Cancel
Chime Demographic Questions

 

At Chime we are committed to providing a welcoming and inclusive work environment, and that starts with our application process. To hold ourselves accountable for equitable and inclusive hiring practices, we ask candidates to voluntarily complete the following survey that helps us in our efforts to ensure equal employment opportunities.

We believe that diversity, equity, and belonging—DEB— is essential to our ability to help our diverse member base and continue delivering on our mission to provide them with financial peace of mind. Anyone who wants to work with us will be considered without regard to their race/ethnicity, religion, national origin, age, sex, marital status, ancestry, disability, gender identity, or sexual orientation.

Your responses will be reported in aggregate only. Please be assured that your responses (or choosing not to identify) will have zero impact on your candidacy; this information is maintained confidentially and always stored separately from your application.

This information will be stored in Greenhouse (you can review Greenhouse’s privacy policy here). Access inside Chime to this information is restricted to selected members of the People team, who are committed to keeping details confidential.. Greenhouse will retain this information, along with the rest of the information provided in your application, 18 months from your application date, after which all application information will be anonymized and stored only in that form. Once information is anonymized, neither we nor Greenhouse can determine the individual to whom it once belonged.

 

I identify my gender as: (Select one) *





I identify as: (Select one) *




I identify my sexual orientation as: (Select one) *








Veteran Status: (Select one) *




I have a disability: (Select one) *




I identify my race/ethnicity as (please mark all that apply): *












Enter the verification code sent to to confirm you are not a robot, then submit your application.

This application was flagged as potential bot traffic. To resubmit your application, turn off any VPNs, clear the browser's cache and cookies, or try another browser. If you still can't submit it, contact our support team through the help center.