Security Engineer

Chess.com is the world's leading platform for chess, serving over 250 million players globally with a dedicated team of 600+ professionals. We are seeking a Security Engineer to help protect our infrastructure and ensure the integrity of our gaming platform in a fully remote environment.

Key responsibilities

• Lead the vulnerability management program by triaging and remediating security gaps discovered through Bug Bounty programs.
• Conduct comprehensive threat modeling to identify potential attack vectors and ensure designs meet industry security standards.
• Manage security incident response by analyzing penetration testing results and SIEM reports to drive actionable remediation.
• Optimize security infrastructure, including Web Application Firewalls, to align with the evolving threat landscape.
• Provide expert security consultation to development teams to integrate best practices into the software development lifecycle.

Requirements

• Bachelor's degree in Computer Science, Information Security, or equivalent professional experience.
• Minimum of 3 years of professional experience specifically focused on web application security.
• Demonstrated expertise with security testing tools such as Burp Suite for web request analysis.
• Strong written communication skills in English with the ability to explain complex security concepts clearly.
• Proven ability to collaborate effectively within a fully distributed, remote team environment.

What we offer

• A full-time position within a mission-driven, flat, and collaborative organizational culture.
• The opportunity to work 100% remotely from anywhere in the world.
• Engagement with a global team of experts dedicated to supporting the worldwide chess community.