Application Security Engineer - Remote
About The Company
Gemini is a leading global crypto and Web3 platform founded by Cameron and Tyler Winklevoss in 2014. The company offers a comprehensive suite of simple, reliable, and secure crypto products and services to individuals and institutions across more than 70 countries. Gemini's mission is to unlock the next era of financial, creative, and personal freedom by providing trusted access to the decentralized future. The company envisions a world where cryptocurrency reshapes the global financial system, internet, and money, fostering greater choice, independence, and opportunity for all. By bridging traditional finance with the emerging cryptoeconomy in a manner that is more open, fair, and secure, Gemini aims to lead the industry into a new paradigm. As a publicly traded entity, Gemini is positioned to accelerate this vision with increased scale, reach, and impact, continually innovating in the rapidly evolving blockchain and digital asset landscape.
About The Role
The Application Security department at Gemini plays a crucial role in safeguarding the company's products and services from security threats, ensuring customer trust and regulatory compliance. The Application Security (AppSec) team is dedicated to integrating security into every phase of product development, from initial requirements to deployment.
The Staff Application Security Engineer will be a key member of this team, responsible for defining and executing the technical strategy to secure critical attack surfaces such as on-chain platforms, exchanges, and credit card integrations. Operating with a high degree of autonomy, this role involves close collaboration with senior engineering leadership to embed security best practices throughout the development lifecycle. The engineer will also spearhead the design and development of AI-driven security tools to automate threat detection and mitigation, supporting Gemini’s AI-first approach. This position offers an exciting opportunity to influence security architecture at scale, innovate with cutting-edge AI solutions, and contribute to the secure growth of a pioneering fintech company.
Responsibilities
- Own and evolve the Gemini Secure Software Development Lifecycle (SDLC) guardrails as an application security subject matter expert
- Lead architecture reviews, threat modeling sessions, code reviews, and penetration tests for high-risk applications and services
- Design and develop AI agents integrated throughout the SDLC to automate threat modeling, secure code review, and reduce AppSec toil
- Create and deliver hands-on application security training programs to empower engineering teams at scale
- Participate in the Application Security on-call rotation, leading post-incident analysis and security hardening efforts
- Collaborate with cross-functional teams to embed security considerations into all phases of product development
- Continuously evaluate emerging security threats and develop strategies to mitigate potential risks
Qualifications
- Proven experience in performing design reviews, threat modeling, secure code reviews, and penetration testing with an attacker mindset
- Strong understanding of application security best practices and familiarity with common vulnerabilities such as SSRF, race conditions, privilege escalations, etc.
- Deep code review proficiency in languages like Scala, Java, Go, and hands-on experience with Python, Go, or similar for building security tools
- Experience implementing custom detection and prevention controls to address security issues beyond OWASP Top 10
- Familiarity with highly regulated environments such as financial services, fintech, or crypto, with the ability to understand business objectives and security risks
- Excellent cross-functional communication and collaboration skills spanning security, engineering, and product teams
- Typically 7-10+ years of experience or equivalent impact in application security or product security roles
Benefits
- Competitive starting salary commensurate with experience
- Discretionary annual bonus
- Long-term incentive through equity grants for new hires
- Comprehensive health insurance plans
- 401(k) plan with company matching contributions
- Paid parental leave to support work-life balance
- Flexible time-off policy to accommodate personal needs
- Hybrid work model combining in-office and remote work, depending on location and role