Senior Offensive Security Engineer

Position Overview

We are seeking a Senior Security Engineer to build and lead our Offensive Security program at Chime. In this role, you will attack Chime’s services, applications, and infrastructure to discover security issues and report them to our internal technology teams. This is a unique opportunity to grow your technical and leadership skills within a collaborative and dynamic team.

You will work closely with Information Security teams, provide technical leadership, and leverage your offensive cybersecurity expertise to identify weaknesses and strengthen our defenses. Compensation: Base salary starting at $157,590 up to $218,900 (actual salary may be higher depending on location, skills, qualifications, and experience), with bonus, competitive equity package, and benefits.

Key Responsibilities

• Independently manage complete red team exercises.
• Partner with Engineering, Product, IT, and other business functions to drive security improvements across the organization.
• Research emerging attack vectors, vulnerabilities, and techniques.
• Utilize your offensive skills to identify weaknesses and build defenses against potential attacks.
• Develop custom payloads and exploits.
• Emulate adversaries by attacking web applications, cloud platforms, and supporting services (e.g., Kubernetes/Container Orchestration platforms).
• Collaborate with detection engineers to build high fidelity alerting based on emerging tactics, techniques, and procedures.
• Participate in purple-team exercises to mature the security program.

Required Qualifications

• 4+ years of combined experience in offensive security, red teaming, or application security roles.
• Experience in conducting surreptitious cloud-based attacks.
• Experience with developing custom tools and payloads to bypass defensive products in mature network environments.
• Ability to perform unsupervised red team engagements and conduct adversarial simulations.
• Proven ability to explain vulnerabilities and weaknesses to non-technical stakeholders.

Preferred Qualifications

• (Nice to have) Relevant certifications such as OSCP, OSCE, OSEE, Certified Red Team Operator (CRTO), or GIAC Red Team Professional certification (GRTP).

Benefits & Perks

• Compensation: Base salary starting at $157,590 up to $218,900, plus bonus, competitive equity package, and benefits.
• In-office work policy: Four days a week in the office with Fridays remote (for those near an office), plus team and company-wide events.
• In-office perks: Backup child, elder, and/or pet care support and a subsidized commuter benefit.
• 401k match: Along with great medical, dental, vision, life, and disability benefits.
• Generous time off: Vacation policy, company-wide Chime Days, and bonus paid days off.
• 1% of your time off dedicated to supporting local community organizations.
• Annual wellness stipend for eligible wellness-related expenses.
• Up to 24 weeks of paid parental leave for birthing parents and 12 weeks for non-birthing parents.
• Access to Maven, offering up to $15k lifetime reimbursement for family planning expenses.
• In-person and virtual events to connect with fellow team members, along with delightful snack boxes.
• A challenging and fulfilling opportunity to join one of the most experienced teams in FinTech and help millions unlock financial progress.