Staff Application Security Engineer

📋 Description

• Own and evolve the Gemini Secure SDLC guardrails as AppSec SME
• Lead architecture reviews, threat modeling, code reviews, and pen tests
• Design and build AI agents for automated threat modeling and secure code review
• Create and deliver hands-on application security training for engineers
• Participate in AppSec on-call rotation and post-incident hardening

🎯 Requirements

• Design reviews, threat modeling, secure code reviews, and pen testing
• Strong app security background; SSRF, race conditions, privilege escalation
• Code review in Scala/Java/Go; Python or Go for builds
• Custom detection and prevention controls beyond OWASP Top 10
• Familiar with regulated environments (financial/crypto)
• Cross-functional communication (Security, Eng, Product)

🎁 Benefits

• Competitive starting pay
• Discretionary annual bonus
• New hire equity grant
• Comprehensive health plans
• 401K with company matching
• Paid Parental Leave
• Flexible time off