Remote Staff Application Security Engineer

Description:

• Join Gemini's Application Security team as a Staff Application Security Engineer, focusing on securing critical attack surfaces like on-chain, exchange, and credit card.
• Operate with autonomy and collaborate with senior engineering leadership to design and build AI agents for secure software development lifecycle (SDLC).

Requirements:

• Proven experience in design reviews, threat modeling, secure code reviews, and penetration testing with an attacker mindset.
• Strong knowledge of application security best practices and common vulnerabilities (e.g., SSRF, race conditions).
• Proficiency in Scala, Java, Go, and experience in Python or similar for building.
• Experience in implementing custom application security controls beyond OWASP Top 10.
• Familiarity with regulated environments (financial services, fintech, crypto).
• Excellent cross-functional communication skills.
• Typically 7-10+ years of experience in application security or similar roles.

Benefits:

• Competitive starting pay with a discretionary annual bonus.
• Long-term incentive through a new hire equity grant.
• Comprehensive health plans and 401K with company matching.
• Paid Parental Leave and flexible time off.