{"id":948868,"url":"https://alion.io/job/chess-security-engineer","title":"Security Engineer","company":{"id":673479,"name":"Chess","domain":"chess.com","url":"https://alion.io/company/chess-5","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Rippling","truth_index":{"grade":"A","score":95,"open_postings":3,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":69,"computed_at":"2026-11-04T06:34:25Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"inferred_payroll_markers","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":75000,"max_usd":162000,"period":"year","method":"global_role_seniority_cell","sample_n":854},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Burp Suite","optional":false},{"name":"SIEM","optional":false},{"name":"Threat Modeling","optional":false},{"name":"JavaScript","optional":true},{"name":"Jira","optional":true},{"name":"PHP","optional":true}],"status":"live","first_seen_at":"2026-09-15T09:36:26Z","employer_posted_date":"2026-09-15","last_verified_at":"2026-11-04T16:17:44Z","board_verified":true,"closed_at":null,"days_open":50,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":50},"description":"About Us\nChess.com is one of the largest gaming sites in the world and the #1 platform for playing, learning, and enjoying chess.\nWe are a team of 600+ fully remote people in 60+ countries working hard to serve the global chess community. We are here to support 250M+ chess players worldwide with the best possible product, content, and tools to serve the community!\nWe are a tech company. A gaming company. A content company. And we do it all with passion and commitment to the game. Above all we prize our mission-driven, flat, life-celebrating, no-corporate culture, and we look forward to meeting you and learning more about what you can bring to the team.\nAbout The Role\nThe Security Engineer plays a critical role in protecting our technology infrastructure and maintaining the security posture of our gaming platform. This position exists to proactively identify, assess, and mitigate security vulnerabilities while serving as a trusted security advisor to engineering teams across the organization. The role directly impacts our ability to safeguard user data, maintain platform integrity, and ensure secure development practices are embedded throughout our product development lifecycle.\nThis position is essential for building and maintaining robust security defenses in a fast-paced, remote-first technology environment where security expertise must be seamlessly integrated into daily engineering operations and strategic decision-making processes.\nWhat you'll do\nLead vulnerability management program by triaging, reproducing, and assessing security vulnerabilities submitted through Bug Bounty programs, working directly with engineering teams to prioritize and remediate discovered security gaps\nConduct comprehensive threat modeling by collaborating with engineering teams to analyze proposed solutions, ensuring designs meet security industry standards and identifying potential attack vectors before implementation\nManage security incident response by reviewing penetration testing results and SIEM reports, translating technical findings into actionable remediation tasks, and tracking resolution progress through completion\nOptimize security infrastructure by applying updates to Web Application Firewalls (WAF) and other security systems, ensuring configurations align with current threat landscape and organizational needs\nDrive security tool evaluation and implementation by researching, evaluating, and recommending security software solutions, attending vendor demonstrations, and leading procurement processes from requirements gathering through deployment\nProvide security consultation and guidance by serving as subject matter expert to development teams, ensuring security best practices are integrated into software development lifecycle and architectural decisions\nMaintain security awareness and documentation by communicating security updates, progress reports, and recommendations to stakeholders through established channels and maintaining current security policies and procedures\nQualifications\nBachelor's degree in Computer Science, Information Security, or related technical field, or equivalent professional experience\nMinimum 3+ years of professional experience specifically in web application security\nDemonstrated expertise with security testing tools such as Burp Suite or equivalent web request analysis and tampering tools\nStrong written communication skills in English with ability to clearly explain technical security concepts to diverse audiences\nExperience working effectively in fully distributed/remote team environments\nProven ability to collaborate cross-functionally with engineering and development teams\nPreferred Skills and Qualifications\nPrevious hands-on experience managing or participating in Bug Bounty programs\nProgramming experience in PHP or JavaScript\nExperience with penetration testing methodologies and tools\nKnowledge of SIEM platforms and security monitoring systems\nFamiliarity with Web Application Firewall (WAF) configuration and management\nUnderstanding of secure software development lifecycle (SDLC) practices\nExperience with Jira or similar project management and issue tracking systems\nStrong sense of ownership and accountability in a flat organizational structure\nPassion for continuous learning and staying current with evolving security threats and technologies\nAbout the Opportunity\nThis is a full-time opportunity\nWe are 100% remote (work from anywhere!)\n---\nYou can learn more about us here:\nChess Is For Everyone!\n Our Values","description_format":"text","description_chars":4514,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":["Continuous learning"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Online Forums & Community Platforms","Hobbies & Leisure"],"lifecycle":[{"event":"open","at":"2026-09-15T22:52:43Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.837,"p_room":0.75,"age_days":49,"expected_fill_days":69,"reasons":["conf:4","win:late"],"computed_at":"2026-11-04T06:34:25Z"},"pay":null,"html_url":"https://alion.io/job/chess-security-engineer","json_url":"https://alion.io/job/chess-security-engineer.json","meta":{"generated_at":"2026-11-04T17:32:27Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":26872,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-05T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":673479},"rest":"https://alion.io/mcp/rest/get_company?id=673479"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fchess-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fchess-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fchess-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/chess-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fchess-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":948868}},{"tool":"search_jobs","arguments":{"company":"chess.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":948868},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}