Note: The job is a remote job and is open to candidates in USA. Gemini is a global crypto and Web3 platform providing secure digital asset products and services. The company is seeking a Staff Security Engineer to lead security strategy, design and implementation, risk mitigation, compliance, incident response, and security team mentorship for its infrastructure and applications.
Responsibilities
- Lead the development and implementation of security strategies, policies, and procedures
- Provide technical leadership and guidance to security engineering teams and other stakeholders
- Stay current with industry trends, emerging threats, and new technologies to ensure our security practices remain effective
- Architect and design secure systems, applications, and infrastructure to protect against threats and vulnerabilities
- Develop and implement security controls, monitoring systems, and response mechanisms
- Collaborate with engineering teams to integrate security practices throughout the software development lifecycle
- Identify and assess security risks, vulnerabilities, and threats to our systems and data
- Develop and implement risk mitigation strategies and incident response plans
- Conduct regular security assessments, penetration tests, and vulnerability scans
- Ensure compliance with industry standards, regulations, and best practices (e.g., GDPR, CCPA, NIST, ISO 27001)
- Develop and maintain documentation related to security policies, procedures, and compliance requirements
- Lead incident response efforts for security breaches, including investigation, containment, and remediation
- Conduct post-incident analysis to identify lessons learned and improve security posture
- Mentor and train junior security engineers and other team members on security best practices and technologies
- Promote a culture of security awareness and continuous improvement within the organization
- Work closely with cross-functional teams, including IT, development, and operations, to address security concerns and integrate security solutions
- Communicate security risks, strategies, and updates to senior management and other stakeholders
Skills
- • Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or an equivalent experience
- • 8-10+ years of experience in security engineering, with a strong background in designing and implementing security solutions
- • Deep expertise in security technologies, including firewalls, intrusion detection/prevention systems, encryption, and vulnerability management
- • Proven experience with cloud security, network security, application security, and identity and access management
- • Strong understanding of security frameworks, standards, and regulations (e.g., NIST, ISO 27001, PCI-DSS)
- • Excellent problem-solving skills and the ability to handle complex security challenges
- • Strong communication skills, with the ability to convey technical information to non-technical stakeholders
Benefits
- A discretionary annual bonus
- Long-term incentive in the form of a new hire equity grant
- Comprehensive health plans
- 401K with company matching
- Paid Parental Leave
- Flexible time off
- In the United States, we offer a hybrid work approach at our hub offices, balancing the benefits of in-person collaboration with the flexibility of remote work. Employees who do not live near one of our hubs are part of our remote workforce.
Company Overview
Company H1B Sponsorship