Staff Security Engineer, Threat Detection & Response

As a Staff Security Engineer on Gemini's Threat Detection and Response team, you shape security strategy and lead the design and implementation of solutions protecting our infrastructure and applications against threats. You bring deep expertise in security engineering and strong leadership to a team that forms the backbone of trust in our crypto platform, which serves individuals and institutions across over 70 countries.

What you'll do

• Lead the development and implementation of security strategies, policies, and procedures across the organization
• Provide technical leadership and guidance to security engineering teams and other stakeholders
• Stay current with industry trends, emerging threats, and new technologies to ensure security practices remain effective
• Architect and design secure systems, applications, and infrastructure to protect against threats and vulnerabilities
• Develop and implement security controls, monitoring systems, and response mechanisms
• Collaborate with engineering teams to integrate security practices throughout the software development lifecycle
• Identify and assess security risks, vulnerabilities, and threats to systems and data
• Develop and implement risk mitigation strategies and incident response plans
• Conduct regular security assessments, penetration tests, and vulnerability scans
• Ensure compliance with industry standards, regulations, and best practices such as GDPR, CCPA, NIST, and ISO 27001
• Develop and maintain documentation related to security policies, procedures, and compliance requirements
• Lead incident response efforts for security breaches, including investigation, containment, and remediation
• Conduct post-incident analysis to identify lessons learned and improve security posture
• Mentor and train junior security engineers and other team members on security best practices and technologies
• Promote a culture of security awareness and continuous improvement within the organization
• Work closely with cross-functional teams including IT, development, and operations to address security concerns and integrate solutions
• Communicate security risks, strategies, and updates to senior management and other stakeholders

What you bring

• A Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or equivalent experience
• 8-10+ years of experience in security engineering, with a strong background in designing and implementing security solutions
• Deep expertise in security technologies including firewalls, intrusion detection and prevention systems, encryption, and vulnerability management
• Proven experience with cloud security, network security, application security, and identity and access management
• Strong understanding of security frameworks, standards, and regulations such as NIST, ISO 27001, and PCI-DSS
• Excellent problem-solving skills and the ability to handle complex security challenges
• Strong communication skills with the ability to convey technical information to non-technical stakeholders

What we offer

• Base salary range of $168,000-$240,000 in New York
• A discretionary annual bonus
• Long-term incentive in the form of a new hire equity grant
• Comprehensive health plans
• 401K with company matching
• Paid parental leave
• Flexible time off
• Hybrid work approach at hub offices, with remote work options for those not near an office location

About Gemini

Gemini is a global crypto and Web3 platform founded in 2014, offering crypto products and services to individuals and institutions in over 70 countries. As a publicly traded company, Gemini bridges traditional finance with the emerging cryptoeconomy, aiming to unlock financial, creative, and personal freedom through trusted access to decentralized systems.