Staff AppSec Engineer: AI-Driven SDLC Security & On-Chain

Gemini; Miami, New York (FL, NY); Hybrid; USD 168,000 - 240,000; Full time

Benefits offered by this job

401K with company matching

Discretionary annual bonus

New hire equity grant

Flexible time off

Job summary

Gemini is seeking a Staff Application Security Engineer to join the AppSec team in the United States. You will own the technical strategy to secure critical surfaces such as on-chain, exchange, and payment integrations, and you will collaborate with senior engineering leadership.

You will design and build AI‑driven agents for secure SDLC processes, perform architecture reviews, threat modeling, and secure code reviews, and lead on‑call incident response.

Qualifications

• Design reviews, threat modeling, secure code reviews, and penetration testing with an attacker mindset.
• Strong background in application security best practices and familiarity with common vulnerabilities.
• Deep code review proficiency in Scala, Java, Go or other languages; hands-on in Python/Go.
• Experience implementing custom detection and prevention application security controls beyond OWASP Top 10.
• Familiarity with regulated environments; strong cross-functional communication.
• 7-10+ years of experience in application security or related roles.

Responsibilities

• Own and evolve the Gemini Secure SDLC guardrails as a security SME.
• Lead architecture reviews, threat modeling, code reviews, and pentesting for high‑risk apps.
• Design and build AI agents to secure the SDLC; enable AI-driven secure code generation and review.
• Create and deliver hands-on application security training at scale.
• Participate in on-call rotation and lead post-incident hardening.

Skills

Threat modeling

Secure code review

Penetration testing

Architecture reviews

Python/Go

Scala/Java

Cross-functional collaboration

Regulated environments

7-10+ years experience

Job description

Gemini is seeking a Staff Application Security Engineer to join the AppSec team in the United States. You will own the technical strategy to secure critical surfaces such as on-chain, exchange, and payment integrations, and you will collaborate with senior engineering leadership.

You will design and build AI‑driven agents for secure SDLC processes, perform architecture reviews, threat modeling, and secure code reviews, and lead on‑call incident response.