Staff Security Engineer, Threat Detection & Response

gemini; United States; Hybrid; USD 180,000 - 260,000; Full time

Benefits offered by this job

Competitive base pay

Discretionary annual bonus

New-hire equity grant

Comprehensive health plans

401(k) with company match

Hybrid work model

Paid parental leave

Flexible time off

Job summary

Gemini is seeking a staff-level security leader to shape security strategy and engineering for our digital asset platform, guiding protections across infrastructure and applications in a high-stakes financial environment.

You will provide technical leadership, drive incident response, embed security in the software development lifecycle, and mentor engineers while coordinating with senior management on risk and compliance with frameworks such as NIST, ISO 27001, PCI-DSS, GDPR, and CCPA.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, IT or equivalent practical experience.
• Eight to ten+ years in security engineering with a track record of designing and delivering security solutions.
• Deep expertise with firewalls, IDS/IPS, encryption, and vulnerability management.
• Experience spanning cloud, network, application, and identity and access security.
• Strong grasp of security frameworks and regulations such as NIST, ISO 27001, PCI-DSS.

Responsibilities

• Shape security strategy, policies, and procedures, and provide technical leadership to security engineering teams and stakeholders.
• Architect secure systems, applications, and infrastructure, and build monitoring and response controls.
• Embed security practices throughout the SDLC alongside engineering partners.
• Identify and assess security risks, run vulnerability scans and penetration tests, and drive mitigation plans.
• Lead incident response for breaches, including investigation, containment, remediation, and post-incident review.
• Maintain alignment with frameworks such as NIST, ISO 27001, PCI-DSS, GDPR, and CCPA, and keep related documentation current.
• Mentor junior engineers and promote a culture of security awareness across the organization.
• Communicate security risks, strategy, and updates to senior management and cross-functional partners.

Skills

Security leadership

Incident response

Threat modeling

Cloud security

SDLC security

Communication

Education

Bachelor's degree in Computer Science or related field

Tools

Firewalls

IDS/IPS

Encryption

Vulnerability management

Job description

This staff-level role leads security strategy and engineering for a digital asset platform, shaping protections across infrastructure and applications in a high-stakes financial environment. The position blends technical leadership, hands‑on design, incident response, and cross-functional collaboration to continuously mature the organization’s security posture.

Responsibilities

• Shape security strategy, policies, and procedures, and provide technical leadership to security engineering teams and stakeholders.
• Architect secure systems, applications, and infrastructure, and build monitoring and response controls.
• Embed security practices throughout the software development lifecycle alongside engineering partners.
• Identify and assess security risks, run vulnerability scans and penetration tests, and drive mitigation plans.
• Lead incident response for breaches, including investigation, containment, remediation, and post-incident review.
• Maintain alignment with frameworks such as NIST, ISO 27001, PCI-DSS, GDPR, and CCPA, and keep related documentation current.
• Mentor junior engineers and promote a culture of security awareness across the organization.
• Communicate security risks, strategy, and updates to senior management and cross-functional partners.

Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or equivalent practical experience.
• Eight to ten or more years in security engineering with a track record of designing and delivering security solutions.
• Deep expertise with firewalls, intrusion detection and prevention, encryption, and vulnerability management.
• Experience spanning cloud, network, application, and identity and access security.
• Strong grasp of security frameworks and regulations such as NIST, ISO 27001, and PCI-DSS.
• Excellent problem-solving skills and the ability to explain technical issues to non-technical stakeholders.

Benefits and work setup

• Competitive base pay plus discretionary annual bonus and a new-hire equity grant.
• Comprehensive health plans, 401(k) with company match, paid parental leave, and flexible time off.
• Hybrid work at hub offices with required in-person onboarding; remote-friendly arrangements supported outside hub regions.