About the role

We are looking for a Product Security Manager to lead a team focused on cloud, data, and AI security within our Product Security organization.

This role is responsible for securing our cloud infrastructure, protecting sensitive data, and enabling safe adoption of AI across our products and internal systems. You will work closely with engineering, product, and data teams to ensure that modern systems, including AI-powered features, are designed and operated securely.

While cloud and data security are core pillars, AI security is an increasingly critical area of focus. You will help define how we safely leverage AI technologies while managing risks such as data exposure, misuse, and insecure integrations.

This role operates within a flexible POD model, requiring you and your team to move fluidly across security domains based on business priorities.

The base salary offered for this role and level of experience will begin at $152,000 and up to $210,000. Full-time employees are also eligible for a bonus, competitive equity package, and benefits. The actual base salary offered may be higher, depending on your location, skills, qualifications, and experience.

In this role, you can expect to 

• Own the security posture of cloud infrastructure, data systems, and AI-enabled applications across product surfaces
• Influence data, ML, and infrastructure team roadmaps and drive alignment on security priorities without direct authority
• Partner with engineering and product teams to embed security into system design and development workflows
• Lead and grow a team of security engineers, setting a high bar for technical execution, ownership, and impact
• Define and execute strategy for securing cloud-native architectures and sensitive data at scale
• Establish guardrails and secure design patterns for AI adoption, including safe integration of third-party and internal AI systems
• Identify and mitigate risks related to AI systems, including prompt injection, data leakage, and misuse of models or APIs
• Build scalable controls and automation around identity, access, encryption, and data protection
• Operate effectively within a POD model, shifting focus across security domains based on business needs
• Lead and support response efforts for security incidents related to cloud, data, and AI risks

To begin in this role, you have

• 5+ years of experience in security engineering, with significant experience in cloud and/or data security
• 2+ years of experience managing or leading security engineers
• Strong understanding of cloud platforms (AWS, GCP), Infrastructure as Code (IaC), and modern infrastructure patterns
• Experience designing or securing systems that handle sensitive or regulated data
• Experience securing or evaluating AI/ML systems, or demonstrated ability to operate effectively in ambiguous and emerging security domains
• Strong technical judgment and the ability to go deep in architecture and security discussions when needed
• Experience operating in fast-paced, product-driven environments with shifting priorities
• Strong communication skills with the ability to translate security risks into business impact

#LI-JL1 #LI-Onsite

About the role

We’re hiring a Physical Security Lead to help safeguard our people, spaces, and operations every day. This role sits at the intersection of strategy and execution—turning security priorities into consistent, effective action on the ground.

You’ll own core physical security functions, including guard operations, access control, and surveillance systems, ensuring they operate seamlessly and scale with our needs. You’ll also serve as a steady, decisive presence during critical moments—leading real-time incident response and coordinating across teams to maintain control and minimize risk.

Beyond day-to-day operations, you’ll play a key role in strengthening our overall security posture. That means identifying gaps, improving processes, and building systems that are resilient, reliable, and ready to adapt as we grow.

The base salary offered for this role and level of experience will begin at $94,000 and up to $130,000. Full-time employees are also eligible for a bonus, competitive equity package, and benefits. The actual base salary offered may be higher, depending on your location, skills, qualifications, and experience.

In this role, you can expect to

• Own day-to-day physical security operations across the site, including guard coverage, performance, and overall effectiveness
• Oversee the 24/7 Physical Security Operations Center (PSOC), ensuring continuous monitoring, escalation, and response readiness
• Lead real-time incident response—whether handling a security breach, medical event, or facility issue—with clarity and control
• Ensure security systems (access control, CCTV, alarms) are fully operational, reliable, and ready when needed
• Conduct regular site assessments to identify risks—such as blind spots or vulnerable entry points—and address them proactively
• Ensure standard operating procedures (SOPs) are consistently followed across all shifts, updating them as needed to reflect evolving risks
• Manage and partner with external vendors, including contract guard teams and security system providers
• Build, train, and lead Emergency Response Teams (ERT) across all locations, ensuring readiness for rapid and effective response

To thrive in this role, you have

• 3–7+ years working in physical security, military, or law enforcement environments
• 1–3+ years leading teams or overseeing field operations
• Hands-on experience responding to real incidents and staying calm under pressure
• Experience working with access control systems, VMS platforms, and incident reporting tools
• A sharp eye for risk—able to assess a space and quickly spot what could go wrong
• Clear, direct communication and a strong instinct for enforcing standards and procedures
• Required security licensing (e.g., Guard Card) and ability to pass background checks

#LI-Onsite #LI-JL1

About the role

We are looking for a Sr. Full Stack Application Security Engineer with deep expertise in mobile application security to join our Product Security team. This role is hands-on and impact driven. You will work directly with mobile, backend, and platform engineering teams to identify, prevent, and remediate security issues across our iOS, Android, API, and backend systems.

You will operate close to the code and close to the product. That means reviewing architectures across the stack, influencing secure design decisions early, and helping teams ship features safely without slowing delivery. This role is for someone who understands how modern distributed systems and mobile apps are built, deployed, and attacked in real-world environments.

While mobile application security is a core focus, you will be part of a team that owns security posture across the full application stack including APIs, backend services, identity and authentication flows, and CI/CD pipelines.

The base salary offered for this role and level of experience will begin at $213,000 and up to $295,000. Full-time employees are also eligible for a bonus, competitive equity package, and benefits. The actual base salary offered may be higher, depending on your location, skills, qualifications, and experience. 

In this role, you can expect to

• Build and improve security capabilities, automation, and guardrails for mobile applications and backend/API services
• Perform application or API/backend penetration testing 
• Identify, triage, and help remediate vulnerabilities across Chime products
• Partner closely with engineering and product teams to embed security into the development lifecycle across mobile apps, APIs, and backend services
• Perform architecture and code reviews across the stack (iOS/Android, APIs, backend) with a focus on secure data storage, authentication, authorization, secure communication, and session/token handling
• Leverage AI to accelerate security workflows (e.g., code review support, triage, threat modeling), and partner with teams building AI-enabled features to define and implement production-grade AI security controls 

To thrive in this role, you have

• 5+ years of experience in application security, with strong hands-on experience across both mobile and backend systems 
• Hands on experience securing iOS and Android applications in production environments
• Strong understanding of mobile threat models and common attack techniques
• Experience with mobile security testing techniques, including static and dynamic analysis
• Familiarity with iOS and Android platform security features and limitations
• Practical coding experience, preferably in Ruby, Go, Python  languages
• Ability to clearly communicate security risks, tradeoffs, and remediation guidance to engineering partners

#LI-Hybrid #LI-JL1

About the role

We are looking for an early-career Security Engineer to join our Product Security team,  someone who has a builder’s mindset, is eager to learn, and is excited to contribute to both planned initiatives and dynamic, real-time security needs with enough guidance and mentorship.

In this role, you’ll be part of a hands-on security team working across Infrastructure, Application, and Enterprise Security where responsibilities sometimes overlap. You’ll contribute to the design and implementation of security controls and solutions, review technical designs, and respond to findings from security researchers and penetration testers. You’ll also write code and build automation, using AI tools to help accelerate your work and strengthen security practices. Along the way, you’ll gain exposure to a wide range of security challenges that will accelerate your growth as a security engineer.

The base salary offered for this role and level of experience will begin at $130,000and up to $180,000. Full-time employees are also eligible for a bonus, competitive equity package, and benefits. The actual base salary offered may be higher, depending on your location, skills, qualifications, and experience. 

In this role, you can expect to 

• Develop assistive automation and workflows to streamline the detection and reporting of security findings
• Contribute to tracking and remediation of discovered security vulnerabilities
• Participate in projects that reduce security risks and attack surface within our infrastructure and corporate applications
• Get the opportunity to use top notch AI systems in your daily work and play a role in strengthening their security

To thrive in this role, you have

• 1–3 years of experience in a security role, or in a development role with a focus on or enthusiasm for security
• Flexibility and a willingness to take on a variety of tasks in different security domains
• Practical coding experience preferably in Go, Python, or Ruby
• Hands-on experience with AWS and ideally GCP
• Exposure to cloud and application security concepts
• Experience with Terraform (a plus)

#LI-Hybrid #LI-JL1

About the role

We are seeking a Senior Security Engineer to build and lead our Offensive Security program. In this role, you will attack Chime’s services, applications, and infrastructure to discover security issues and report them to our internal technology teams. This position will offer you the opportunity to grow your technical and leadership skills while being part of a collaborative and dynamic team that finds joy in problem-solving and innovating together at Chime.

The ideal candidate will be an offensive cybersecurity professional with a passion for analyzing codebases, testing hypotheses, and designing tools to impact web applications and their infrastructure. This Engineer will work closely with teams throughout Information Security, as well as provide technical leadership and advice to teams and leaders throughout Chime. You will be in direct contact with teams in a variety of business verticals, giving you first hand knowledge about how Chime is built and how it operates at a deep, technical level. Additionally, you will leverage the knowledge you gain about Chime to find new ways to break services, processes, and infrastructure throughout the company.

We're a small, dedicated team that’s always thinking of innovative ways to tackle challenging security problems. We take on ambitious projects that have a significant impact on our members and help build a strong security culture within our company. The team encourages discussing the problems we are solving, the methods we use, and celebrating our accomplishments through public blogs and at conferences. If these resonate with the way you work, we'd love to hear from you.

The base salary offered for this role and level of experience will begin at $181,000 and up to $250,000. Full-time employees are also eligible for a bonus, competitive equity package, and benefits. The actual base salary offered may be higher, depending on your location, skills, qualifications, and experience.

In this role, you can expect to

• Independently manage complete red team exercises.
• Partner with Engineering, Product, IT, and other business functions to drive security improvement across the organization
• Research emerging attack vectors, vulnerabilities and techniques
• Utilize your offensive skills to identify weaknesses and build defenses against those who may point their attacks at Chime
• Develop custom payloads and exploits
• Emulate adversaries like cybercriminals and insider threats by attacking web applications, cloud platforms and supporting services(Kubernetes / Container Orchestration platforms etc.) 
• Collaborate closely with detection engineers to build high fidelity alerting based on emerging attack vectors and tactics, techniques and procedures
• Participate in purple-team exercises to mature the security program

To thrive in this role, you have

• 4+ years of combined experience in either an offensive security, red teaming, or application security role.
• Experience in conducting surreptitious cloud based attacks
• Experience with developing custom tools and payloads which bypass defensive products, and remain undetected in a mature network environment
• Ability to perform unsupervised red team engagements and experience with performing  adversarial simulation
• Ability to explain vulnerabilities and weaknesses to non-technical stakeholders
• (Nice to have) Relevant certifications: OSCP (Offensive Security Certified Professional), OSCE (Offensive Security Certified Expert) and OSEE (Offensive Security Exploitation Expert), Certified Red Team Operator (CRTO), GIAC Red Team Professional certification (GRTP)

#LI-Hybrid #LI-JC1