Principal, Offensive Security

Empower the Individual Through Crypto

Gemini is a crypto exchange and custodian that allows customers to buy, sell, store, and earn more than 30 cryptocurrencies like bitcoin, bitcoin cash, ether, litecoin, and Zcash. Gemini is a New York trust company that is subject to the capital reserve requirements, cybersecurity requirements, and banking compliance standards set forth by the New York State Department of Financial Services and the New York Banking Law. Gemini was founded in 2014 by twin brothers Cameron and Tyler Winklevoss to empower the individual through crypto.

Crypto is about giving you greater choice, independence, and opportunity. We are here to help you on your journey. We build crypto products that are simple, elegant, and secure. Whether you are an individual or an institution, we want to help you buy, sell, and store your bitcoin and cryptocurrency. Crypto is not just a technology, it's a movement.

At Gemini, our mission is to empower the individual and that includes giving our employees flexibility of choice — our Office Optional Policy allows employees to choose to work from one of our physical locations or from home.

Select roles that are location-specific will still be eligible for flexible schedules.

The Department:  Information Security 

In the emerging industry of digital assets, there is nothing more important than trust (which is why Gemini’s very first hires were Security experts). The Gemini Security team forms the backbone of all that we do and is as diverse as the number of challenges we tackle in the crypto space. From security architecture and engineering to maintenance of cold storage systems and data centers to cybersecurity and litigation support, our team ensures that our customers, clients, and employees are safe, secure, and supported.

The Role: Principal, Offensive Security (Red-Team) 

As with many high-growth startups, Gemini faces a wide range of challenges within the security domain. We’re seeking a Principal to build a ground up offensive security assessment capability. This role will redefine our engagement model to scope and execute goal oriented penetration tests with the intention of simulating real world advanced persistent threats. They will all lead the execution of these engagements, least effective engagement debriefs, and provide actionable insight into remediation efforts and the development of robust security controls.

As a plank holder for this new capability, this role will partner with senior technical resources throughout Gemini to gain the insider knowledge critical to successful coverage.  

This role will report to the VP of Information Security, and will work closely with all Gemini technology and engineering teams to 

Responsibilities:

• Design, implement, and evolve an offensive security assessment model
• Participate in threat modeling exercises in application, cloud, and endpoint domains to provide insight into relevant adversarial pressures.
• Communicate identified risks to various technical and non-technical stakeholders.
• Partner with our other Information Security teams to contextualize new, evolving threats to Gemini and develop a prioritized testing strategy to validate existing security controls
• Partner with Trust & Safety analysts to understand the key fraud patterns and validate existing or potential fraud controls with real world testing
• Attack and security vulnerability research

Minimum Qualifications:

• You have 10+ years of experience in information security
• You have 5+ years of offensive security assessment experience
• Excellent written and verbal communication skills
• A strong understanding of endpoint security, systems security, cloud security, and application security
• You have experience establishing successful partnerships with key stakeholders such as engineering directors, product managers, and business owners
• A passion for learning, security, and mentoring
• Previous experience in blockchain and web3 is a strong plus

It Pays to Work Here

We take a holistic approach to compensation at Gemini, which includes:

• Competitive Compensation and Profit-Sharing Equity
• Flexible vacation policy
• Retirement Plan Matching
• Generous Parental leave
• Comprehensive health plans
• Training and professional development

At Gemini, we strive to build diverse teams that reflect the people we want to empower through our products, and we are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, or Veteran status. Equal Opportunity is the Law, and Gemini is proud to be an equal opportunity workplace and affirmative action employer. If you have a specific need that requires accommodation, please let a member of the People Team know.

#LI-AH1

#LI-REMOTE