Security Engineer at Chess.com

About Chess.com

Chess.com is a global gaming and technology company focused on helping people play, learn, and enjoy chess. The company has 600+ fully remote employees across 60+ countries and serves more than 250 million chess players worldwide.

About the Role

Chess.com is hiring a Security Engineer to help protect its technology infrastructure and gaming platform. The role focuses on identifying and mitigating security vulnerabilities, supporting incident response, strengthening security systems, and helping engineering teams integrate security into software development and architecture.

Key Responsibilities

• Lead vulnerability management, including triaging, reproducing, assessing, and tracking vulnerabilities from Bug Bounty programs.
• Work with engineering teams to prioritize and remediate security vulnerabilities.
• Conduct threat modeling for new products, systems, and technical solutions.
• Review penetration testing results and SIEM reports and translate findings into remediation tasks.
• Support security incident response and track issues through resolution.
• Configure and maintain Web Application Firewalls and other security systems.
• Research, evaluate, and support the implementation of security tools and software.
• Provide security guidance to development and engineering teams.
• Promote secure software development practices across the product lifecycle.
• Maintain security policies, procedures, documentation, and stakeholder communications.
• Monitor emerging security threats and recommend improvements to the organisation’s security posture.

Requirements

• Bachelor’s degree in Computer Science, Information Security, or a related technical field, or equivalent professional experience.
• At least 3 years of professional experience in web application security.
• Strong experience with Burp Suite or equivalent web security testing and request analysis tools.
• Strong written English and ability to explain technical security concepts clearly.
• Experience working with fully remote or distributed teams.
• Strong collaboration skills with engineering and development teams.

Preferred Qualifications

• Experience managing or participating in Bug Bounty programs.
• Programming experience with PHP or JavaScript.
• Experience with penetration testing methodologies and tools.
• Knowledge of SIEM platforms and security monitoring systems.
• Experience with Web Application Firewall configuration and management.
• Understanding of secure software development lifecycle practices.
• Experience with Jira or similar project management tools.
• Strong ownership and accountability.
• Commitment to continuous learning in cybersecurity and emerging threats.

What Chess.com Offers

• 100% remote work.
• Work from anywhere.
• Full-time employment.
• Opportunity to work with a global technology and gaming company.

How to Apply

Interested candidates should click here to apply.

Please review the full job requirements before submitting your application.