Staff Platform Security Engineer at Gemini
New York, NY
$168,000–$240,000from the description
Jul 6, 2026
New York, NY
Jul 20, 2026
What this job asks for AI summary
A hands-on engineering role focused on building and maintaining security services, tooling, and automation for cloud and container environments, primarily AWS and Kubernetes. The work involves writing production code daily in Python or Go, developing infrastructure-as-code controls with Terraform, and creating reusable security frameworks and CI/CD guardrails. Suited to engineers with deep cloud security and software development experience who want to operate at platform scale.
Staff level · 8+ years · New York-Newark-Jersey City, NY-NJ-PA · Full-time
“or” means any one of them counts — you don't need all of them.
We read this from the posting text with AI. Skim the description below before ruling yourself out.
How this req sits in the market our data
Roughly 230 people in the New York-Newark-Jersey City, NY-NJ-PA area plausibly meet what this posting asks for (software developers). range 170–300
Applicant volume Moderate — A normal amount of company. The rare requirements below are what will separate a shortlisted application from the rest.
Rare in this occupation — lead with these, and say what you built with them.
Most people in this occupation already list these. Still required — just not what gets you shortlisted.
What the occupation pays Median $170,499 (middle half $133,523–$210,499). This posting is about at that midpoint.
Estimated from BLS employment for this occupation and area, per-skill prevalence across our listing corpus, and published wage benchmarks — as of Jul 28, 2026. It is a model, not a headcount.
Why we read it this way (8)
This role sits at the intersection of software development and information security — the JD explicitly states 'you'll write production code daily, not just infrastructure-as-code' and emphasizes building security platforms and services, which tips the primary classification toward Software Developers (15-1252) over Information Security Analysts (15-1212). The runner-up is noted given the deep security domain focus.
Python and Go are listed as interchangeable ('Python or Go') in both the responsibilities and minimum qualifications; Python is listed as the primary with Go as the alternative.
AWS IAM, VPC, and KMS are all called out explicitly under minimum qualifications as components of AWS security experience. IAM is surfaced as a separate skill given its prominence; VPC and KMS are subsumed under the broader AWS requirement.
The salary range ($168,000–$240,000) is explicitly scoped to New York, California, and Washington states. The role requires in-person attendance twice a week at the NYC office, so it is not fully remote despite a broader US hybrid/remote policy for other employees.
The 'Staff' seniority is supported both by the explicit title ('Staff Platform Security Engineer') and by the scope — setting zero-trust foundations and paved paths across the entire engineering organization, which is genuine cross-team technical authority.
Policy-as-code tools (Open Policy Agent, Sentinel) appear under Preferred Qualifications with 'such as … or similar' phrasing; treated as preferred with named alternatives captured.
Container security scanning, image signing, and supply chain security are listed together under Preferred Qualifications; 'container security scanning' is used as the canonical skill name to represent the cluster.
Service mesh / zero-trust networking appears under Preferred Qualifications.
Read the full posting
The employer publishes the full description on their own site — read it there ↗. Or sign in to read it here — it's free, and it also lets you track this application.