Senior Application Security Engineer

Chime

Confirmed live today High trust

Hybrid

Quick summary

Work type: Hybrid
Location: San Francisco, CA
Salary: $213,000–$295,000 / yr
Posted: 25 days ago
Freshness: Confirmed live today
Nearby: 99+ roles within 25 mi

Market check

Salary context

Above market

How this pay compares to similar roles

Similar $181k

This role $254k

$124k $313k

below market most similar roles pay here above market

This role pays more than 94% of similar roles. Most pay $146,016–$216,271 — the blue band above. At the midpoint, this role pays about $254k versus about $181k for comparable roles.

Based on 240 similar postings.

Employer

About Chime

Chime is a financial technology company offering mobile-first banking services including fee-free checking accounts, savings accounts, and a secured credit builder card through partner banks. Industry: Financial Technology & Neobanking

Chime currently has 40 open roles on FindRole.

Listed pay typically runs $164,000–$251,500 across 40 roles with salary data.

Most-posted roles

View all roles at Chime

At a glance

TL;DR · Senior Application Security Engineer

Role Posting Log in to save

The Senior Application Security Engineer joins the Product Security team to secure mobile, backend, and platform systems. This hands-on role involves identifying, triaging, and remediating vulnerabilities across iOS, Android, API, and backend services. You will perform architecture and code reviews, conduct penetration testing, and build security automation and guardrails. Key responsibilities include influencing secure design decisions, managing identity and authentication flows, and implementing production-grade AI security controls. The role requires expertise in mobile threat models, static and dynamic analysis, and platform security features. Candidates should possess practical coding experience in Ruby, Go, or Python. You will work closely with engineering teams to embed security into the development lifecycle, ensuring that distributed systems and mobile applications remain resilient against real-world attacks while maintaining fast delivery.

Skills

Mobile Application Security iOS Android Ruby Go Python CI/CD Penetration Testing Dynamic Analysis Threat Modeling Identity and Authentication Secure Data Storage AI Security Code Review

What you'll do

Perform application and API/backend penetration testing to identify security flaws.
Conduct architecture and code reviews for iOS, Android, APIs, and backend services.
Identify, triage, and remediate vulnerabilities across all company products.
Build security capabilities, automation, and guardrails for mobile and backend systems.
Embed security into the development lifecycle for mobile apps and backend services.
Implement production-grade AI security controls and leverage AI to accelerate security workflows.
Provide remediation guidance and communicate security risks to engineering partners.

What we're looking for

5+ years of experience in application security with hands-on experience across mobile and backend systems.
Hands-on experience securing iOS and Android applications in production environments.
Strong understanding of mobile threat models and common attack techniques.
Experience with mobile security testing techniques, including static and dynamic analysis.
Familiarity with iOS and Android platform security features and limitations.
Practical coding experience, preferably in Ruby, Go, or Python (preferred).
Ability to clearly communicate security risks, tradeoffs, and remediation guidance to engineering partners.

Similar roles

Senior Application Security Engineer

Upstart

Remote (Canada) 53 days ago $166,900–$230,900

Application Security Threat Modeling Security Architecture Java Python Ruby Go SAST DAST SCA CI/CD Secrets Management API Security Microservices GraphQL REST GenAI AWS CISSP CSSLP CCSP

5+ yrs exp Remote

Save

Application Security Engineer

Opendoor

Miami 131 days ago

Python Go TypeScript Ruby Terraform AWS GCP Azure Kubernetes Apollo GraphQL GraphQL GitHub Advanced Security CodeQL Semgrep HackerOne Burp Suite Cloudflare WAF Claude OpenAI Threat Modeling REST gRPC Mobile Security

Hybrid

Save

Senior Application Security Engineer

LPL Financial

Fort Mill, SC +5 78 days ago

Application Security DevSecOps CI/CD OWASP Top 10 IAST Burpsuite Postman Synopsys BlackDuck PrismaCloud Java C# React Angular HTML CSS REST Containers APIs

5+ yrs exp Hybrid

Save

Senior Application Security Engineer

Arch Capital Group

Farmington, CT 14 days ago $127,000–$172,000

Application Security SAST DAST SCA CI/CD DevSecOps AWS Azure Containers Serverless Threat Modeling NIST OWASP MITRE SDLC Vulnerability Management

5+ yrs exp Hybrid

Save

Application Security Engineer

Leidos

Ashburn, VA 106 days ago $107,900–$195,050

Application Security SAST DAST SCA SDLC Machine Learning Artificial Intelligence Kubernetes Rancher Cloudera Salt Ansible CI/CD Elasticsearch Gitlab Anchore Microfocus WebInspect Configuration Management IaC

8+ yrs exp

Save

Application Security Engineer

Booz Allen Hamilton

Fort Meade, MD +8 42 days ago $99,000–$225,000

Zero Trust Palo Alto Versa Cisco Fortinet Juniper TLS mTLS PKI F5 Nginx A10 NetScaler DMZ Office 365 NIST 800-53 FIPS DoD STIG FedRAMP

Save