Remote Security Engineer: Web App Defense & Threat Modeling

Chess.com; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

Chess.com is a remote-first tech company seeking a Security Engineer to protect its gaming platform and user data, partnering with engineering to embed secure development practices across the lifecycle.

The role leads vulnerability management, conducts threat modeling, handles incident response, tunes WAFs, evaluates security tools, and provides guidance across the SDLC for a global engineering organization. This is a fully remote, full-time position.

Qualifications

• Minimum 3+ years in web application security.
• Proven experience with Burp Suite or equivalent tools.
• Strong written English communication.
• Experience in fully distributed/remote teams.
• Ability to collaborate cross-functionally with engineering.

Responsibilities

• Lead vulnerability management by triaging and remediating vulnerabilities with engineering.
• Conduct threat modeling to identify attack vectors before implementation.
• Manage security incident response and translate findings to actionable tasks.
• Optimize security infrastructure including WAF updates.
• Drive evaluation and implementation of security tools.
• Provide security guidance throughout the SDLC and architecture decisions.
• Maintain security awareness and documentation for stakeholders.

Skills

Web application security

Threat modeling

Vulnerability management

Incident response

Cross-functional collaboration

Education

Bachelor's degree in Computer Science, Information Security, or related field

Tools

Burp Suite

SIEM

WAF

Jira

Job description

Chess.com is a remote-first tech company seeking a Security Engineer to protect its gaming platform and user data, partnering with engineering to embed secure development practices across the lifecycle.

The role leads vulnerability management, conducts threat modeling, handles incident response, tunes WAFs, evaluates security tools, and provides guidance across the SDLC for a global engineering organization. This is a fully remote, full-time position.