Senior AppSec Engineer - AI-Driven Security Tools

Gemini; United States; Hybrid; USD 140,000 - 200,000; Full time

Benefits offered by this job

Competitive starting pay

Discretionary annual bonus

New hire equity grant

Comprehensive health plans

401K with company matching

Paid parental leave

Flexible time off

Job summary

Gemini is seeking a Senior Application Security Engineer to join the Application Security team. You will guide engineering, product, and business teams to design and build secure products, embedding security judgment into every release.

You will lead secure design reviews, threat modeling, code review, and penetration testing for high-risk products like crypto custody, trading systems, and payments, while building AppSec tooling and AI-assisted pipelines.

Qualifications

• Minimum 5+ years in application security or similar roles.
• Experience performing design reviews, threat modeling, secure code reviews, or pen testing with attacker mindset.
• Experience building or contributing to security tooling and automation.
• Strong knowledge of common vulnerabilities (SSRF, race conditions, privilege escalations).
• Strong communication to influence and collaborate cross-functionally.

Responsibilities

• Lead secure design reviews, threat modeling, code review, and pen testing for high-risk products.
• Build AppSec tooling including AI agents for design and code review, SAST/DAST pipelines, and automation that eliminates repeatable security toil
• Partner with engineering teams to remediate vulnerabilities and drive long-term improvements in secure coding practices.

Skills

AppSec experience

Threat modeling

Secure code review

Penetration testing

Security tooling

Automation

Cross-functional

Tools

AI agents

SAST/DAST pipelines

CI/CD security controls

Job description

Gemini is seeking a Senior Application Security Engineer to join the Application Security team. You will guide engineering, product, and business teams to design and build secure products, embedding security judgment into every release.

You will lead secure design reviews, threat modeling, code review, and penetration testing for high-risk products like crypto custody, trading systems, and payments, while building AppSec tooling and AI-assisted pipelines.