2 months ago
Base Salary
$168k - $240k/yr
Responsibilities
- Own and evolve Gemini’s secure software development lifecycle guardrails as an application security subject matter expert.
- Lead architecture reviews, threat modeling, code reviews, and penetration testing for high-risk applications and services.
- Design and build AI agents for automated threat modeling, AI-driven secure code generation and review, and reduced AppSec toil.
- Create and deliver hands-on application security training for engineers at scale.
- Participate in the Application Security on-call rotation and lead post-incident hardening.
Requirements
- Demonstrated ability to perform design reviews, threat modeling, secure code reviews, and penetration testing with an attacker mindset.
- Strong application security background and familiarity with vulnerabilities such as SSRF, race conditions, and privilege escalation.
- Deep code review proficiency in Scala, Java, Go, or other common languages, plus hands-on building experience with Python, Go, or similar.
- Experience implementing custom application security detection and prevention controls beyond the OWASP Top 10.
- Experience in regulated environments such as financial services, fintech, or crypto, with the ability to understand business objectives and security risk.
- Strong cross-functional communication and collaboration across Security, Engineering, and Product.
- Typically 7–10+ years of experience, or equivalent impact, in application security, product security, or similar roles.
- Preferred: experience building AI application security tooling with agents or skills.
- Preferred: experience with supply chain security, SLSA, OWASP SPVS, and other CI/CD security controls.
- Preferred: experience preventing application security vulnerabilities at scale through secure design patterns, automated tooling, or frameworks.
- Preferred: experience with microservice architectures and cloud-native environments.
Benefits
- Competitive starting pay, discretionary annual bonus, and new-hire equity grant.
- Comprehensive health plans, 401(k) with company matching, paid parental leave, and flexible time off.
- Hybrid work at U.S. hub offices with remote flexibility; employees outside hub locations may work remotely.
Categories
About Gemini
Our mission is to unlock the next era of financial, creative, and personal freedom. Gemini (NASDAQ: GEMI) envisions a future where crypto will redesign the global financial system, the internet, and money in a way that provides greater choice, independence, and opportunity for all. As a trusted bridge between the traditional financial system and the emerging cryptoeconomy, we are providing access for individuals and institutions to a decentralized future that is more open, fair, and secure.