Job Summary:
Chime is a financial technology company dedicated to helping individuals achieve financial progress. They are seeking a Senior Offensive Security Engineer to lead their Offensive Security program, focusing on identifying security issues through proactive attacks on services, applications, and infrastructure. This role involves collaboration with various teams to enhance security measures and develop innovative solutions to complex security challenges.
Responsibilities:
• Independently manage complete red team exercises.
• Partner with Engineering, Product, IT, and other business functions to drive security improvement across the organization
• Research emerging attack vectors, vulnerabilities and techniques
• Utilize your offensive skills to identify weaknesses and build defenses against those who may point their attacks at Chime
• Develop custom payloads and exploits
• Emulate adversaries like cybercriminals and insider threats by attacking web applications, cloud platforms and supporting services(Kubernetes / Container Orchestration platforms etc.)
• Collaborate closely with detection engineers to build high fidelity alerting based on emerging attack vectors and tactics, techniques and procedures
• Participate in purple-team exercises to mature the security program
Qualifications:
Required:
• 4+ years of combined experience in either an offensive security, red teaming, or application security role.
• Experience in conducting surreptitious cloud based attacks
• Experience with developing custom tools and payloads which bypass defensive products, and remain undetected in a mature network environment
• Ability to perform unsupervised red team engagements and experience with performing adversarial simulation
• Ability to explain vulnerabilities and weaknesses to non-technical stakeholders
Preferred:
• Relevant certifications: OSCP (Offensive Security Certified Professional), OSCE (Offensive Security Certified Expert) and OSEE (Offensive Security Exploitation Expert), Certified Red Team Operator (CRTO), GIAC Red Team Professional certification (GRTP)
Company:
Chime is a financial technology company that offers mobile banking services. Founded in 2012, the company is headquartered in San Francisco, USA, with a team of 1001-5000 employees. The company is currently Late Stage.
