Senior Application Security Engineer

Salary: $140,000 - 200,000 per year Requirements: We need at least 5 years of experience in application security or a closely related field. We are looking for someone who can conduct design reviews, threat modeling, secure code reviews, or penetration testing with an attacker-focused mindset. We value experience building or materially contributing to security tooling and automation. You should have a strong foundation in application security best practices and familiarity with common vulnerabilities such as SSRF, race conditions, and privilege escalation. We expect hands-on development or scripting experience in languages such as Python, Scala, C++, or JavaScript, with the ability to read and write code. Strong communication skills are important, including the ability to influence without direct authority and collaborate across teams with competing priorities. Preferred: experience building AI-powered application security tools using agents or similar capabilities. Preferred: familiarity with supply chain security, SLSA, OWASP SPVS, and other CI/CD security controls. Preferred: experience working in regulated environments such as financial services, fintech, crypto, or similar sectors. Preferred: experience preventing application security issues at scale through secure design patterns, automated tooling, or reusable frameworks. Preferred: experience with microservice architectures and cloud-native environments. Responsibilities: We lead secure design reviews, threat modeling, code reviews, and penetration testing for high-risk products such as crypto custody, trading systems, and payments. We design, build, and ship AppSec tooling, including AI agents for secure design and code review, AI-enhanced SAST/DAST pipelines, and automation that removes repetitive security work. We partner with engineering teams to fix vulnerabilities and drive lasting improvements in secure coding practices. Technologies: AI AI Agents CI/CD Cloud Support JavaScript OWASP Python Scala Security Web3 More: We are Gemini, a global crypto and Web3 platform founded in 2014, serving individuals and institutions in more than 70 countries with simple, reliable, and secure crypto products and services. Our mission is to unlock the next era of financial, creative, and personal freedom by giving trusted access to the decentralized future. Our Application Security team operates where financial services and emerging technology meet, ensuring security is built in from the earliest product decisions through implementation. In this Senior Application Security Engineer role, we work closely with engineering, product, and business teams to help design secure products and strengthen a security-first culture. We offer competitive pay, an annual bonus, long-term equity, comprehensive health coverage, 401(k) matching, paid parental leave, and flexible time off. In the United States, we support a hybrid hub-office model with remote options for employees outside hub areas, and all new hires complete in-person onboarding at one of our offices. last updated 34 week of 2026