Staff AppSec Engineer – AI‑Driven SDLC Architect

Gemini Personnel Pte Ltd; New York (NY); Hybrid; USD 168,000 - 240,000; Full time

Benefits offered by this job

Competitive starting pay

Discretionary annual bonus

Equity grant

Comprehensive health plans

401K with company matching

Paid Parental Leave

Flexible time off

Job summary

Gemini is seeking a Staff Application Security Engineer to own the technical strategy securing high-risk surfaces such as on-chain and exchange. You will work with senior engineering leadership and design/build AI agents to strengthen the secure SDLC at scale.

You will lead threat modeling, code reviews, and penetration testing while shaping security strategy across engineering and product teams. This role offers hybrid work arrangements in the United States with remote options for eligible

Qualifications

• Proven ability to perform design reviews, threat modeling, secure code reviews, and penetration testing with an attacker mindset.
• Strong background in application security best practices and familiarity with common vulnerabilities (e.g. SSRF, race conditions, privilege escalations, etc.)
• Deep code review proficiency in Scala, Java, Go; hands-on experience in Python or Go for building.
• Experience implementing custom detection and prevention application security controls to eliminate application security issues beyond OWASP Top 10.
• Familiarity with highly regulated environments (financial services, fintech, crypto) and ability to understand business objectives, context, and security risk.
• Strong cross-functional communication and collaboration (Security, Engineering, and Product).
• Typically 7-10+ years of experience or equivalent impact in application security, product security, or similar roles.

Responsibilities

• Own and evolve the Gemini Secure Software Development Lifecycle guardrails as an application security subject matter expert
• Lead architecture reviews, threat modeling, code reviews, and penetration testing for high-risk applications and services
• Design and build AI agents throughout the SDLC for automated threat modeling during design, AI-driven secure code generation and review, and reducing AppSec toil
• Create and deliver hands‑on application security training to enable engineers at scale
• Participate in the Application Security on‑call rotation and lead post‑incident hardening

Skills

Threat modeling

Secure code reviews

Penetration testing

Design reviews

Security best practices

Scala

Java

Go

Python

Security collaboration

Tools

Scala tooling

Job description

Gemini is seeking a Staff Application Security Engineer to own the technical strategy securing high-risk surfaces such as on-chain and exchange. You will work with senior engineering leadership and design/build AI agents to strengthen the secure SDLC at scale.

You will lead threat modeling, code reviews, and penetration testing while shaping security strategy across engineering and product teams. This role offers hybrid work arrangements in the United States with remote options for eligible