Staff Application Security Engineer — AI-Driven SDLC Leader

Gemini; United States; Hybrid; USD 168,000 - 240,000; Full time

Benefits offered by this job

Competitive pay

Annual bonus

Equity grant

Health plans

401K

Parental leave

Flexible PTO

Job summary

Gemini is seeking a Staff Application Security Engineer to own the technical strategy securing on-chain, exchange, and card surfaces. You will work with senior engineering leadership and design AI-enabled security across the SDLC, building secure design reviews, threat modeling, and automated controls.

You''ll lead architecture reviews, threat modeling, code reviews, and PTS. The role requires 7-10+ years in app security, deep code review in Scala/Java/Go, and cross-functional collaboration.

Qualifications

• Proven ability to perform design reviews, threat modeling, secure code reviews, and penetration testing with an attacker mindset
• Strong background in application security best practices and familiarity with common vulnerabilities (e.g. SSRF, race conditions, privilege escalations, etc.)
• Deep code review proficiency in Scala, Java, Go or other common languages, plus hands-on experience in at least Python, Go, or similar for building
• Experience implementing custom detection and prevention application security controls to eliminate application security issues beyond OWASP Top 10
• Familiarity with highly regulated environments (financial services, fintech, crypto, or equivalent) and ability to understand business objectives, business context, and security risk
• Strong cross-functional communication and collaboration (Security, Engineering, and Product)
• Typically 7-10+ years of experience or equivalent impact in application security, product security, or similar roles

Responsibilities

• Own and evolve the Gemini Secure Software Development Lifecycle guardrails as an application security subject matter expert
• Lead architecture reviews, threat modeling, code reviews, and penetration testing for high-risk applications and services
• Design and build AI agents throughout the SDLC for automated threat modeling during design, AI-driven secure code generation and review, and reducing AppSec toil
• Create and deliver hands-on application security training to enable engineers at scale
• Participate in the Application Security on-call rotation and lead post-incident hardening

Skills

Design reviews

Threat modeling

Secure code reviews

Penetration testing

OWASP Top 10

Scala

Java

Go

Python

Cross-functional collaboration

Tools

SLSA

CI/CD security controls

Job description

Gemini is seeking a Staff Application Security Engineer to own the technical strategy securing on-chain, exchange, and card surfaces. You will work with senior engineering leadership and design AI-enabled security across the SDLC, building secure design reviews, threat modeling, and automated controls.

You''ll lead architecture reviews, threat modeling, code reviews, and PTS. The role requires 7-10+ years in app security, deep code review in Scala/Java/Go, and cross-functional collaboration.