Staff Platform Security Engineer

Blockchain Lab analysis

Staff platform security for AWS and Kubernetes at the same listed exchange. The band is higher, and this posting names New York, California, and Washington — still not every state.

Ninety days — illustrative

Not the employer’s onboarding plan.

1. Days 1–30: one control that already exists, read in the repo, not in a slide.
2. Days 31–60: a gate in CI that blocks a class of mistake they have actually had.
3. Days 61–90: an incident write-up that a staff engineer would sign.

A week you can rehearse

• Show a Terraform module you would be willing to own.
• Describe an AWS IAM mistake in production, without the customer name if you must.
• Ask the Miami number if Miami is your city.

Ask them

• What is the band outside New York, California, and Washington?
• How often is the on-call, and who backs you?
• RSU count, vest, and any trading window I should know before I join a public company?

Walk away if

• The staff title is IC work with manager duties added quietly.
• Security on-call is 'best effort'.
• They will not put a non-NY band in writing.

Proof you can build before you apply

• The security-review lab. One control, retested. Do not scan Gemini.

• Failure atlas
• Canon

Blockchain Lab analysis

Public reporting and the employer’s own releases. Not a relationship with Blockchain Lab. Not a credit opinion.

Founded

2014, by Cameron and Tyler Winklevoss, as the company tells it on the posting. New York.

Base

New York, Miami, or remote in the USA if you do not live near a hub. Hybrid at hubs. Everyone onboards in person.

Status

Public. Nasdaq: GEMI. The IPO price is not today's price.

People

Cameron and Tyler Winklevoss. Reuters reported they owned about 75 million shares after the IPO.

1. 11–12 Sep 2025

   IPO

   $425 million at $28

   Reuters: about 15.2 million shares at $28, above a marketed $24–$26 range, proceeds capped at $425 million. Non-diluted value at the IPO price was $3.33 billion by Reuters' calculation. The debut close was reported at about $4.4 billion. Nasdaq took a $50 million private placement at the IPO.

• Listed stock can go to zero faster than private marks get updated. It can also be sold. Know which one you are being paid in.
• State-specific bands. A Remote (USA) label is not the New York range.
• In-person onboarding is mandatory in the posting.
• Founder concentration. Ask which share class the employee plan uses.

Ask them

• What is today's GEMI price, and what strike would a new grant use?
• Does the New York band apply to Miami and to remote, or only to New York?
• Which hub is onboarding, and how many days a year is hybrid actually?
• Is the Money seat a backfill on the ledger, or a new payments product?

• Reuters, IPO priced at $28, 12 Sep 2025
• Reuters, debut valuation about $4.4 billion

If a figure is not in those sources, it is not in this brief on purpose.

Employer stated. Staff platform security engineer: security services in Python or Go, AWS and Kubernetes controls as code, CI gates, and the on-call that comes with them.

• Build and maintain security services, tools, and automation using Python or Go
• Design and implement security controls for AWS and Kubernetes environments using infrastructure-as-code
• Create reusable libraries, frameworks, and platforms that enable secure-by-default patterns
• Develop automated security monitoring, scanning, and remediation services
• Build CI/CD security gates and policy-as-code validation tools

Source: the employer’s public Greenhouse record, job 7905050. Open the original. First seen by this desk 2026-10-06. Nothing above the fold is a substitute for that page.

Blockchain Lab analysis. These lines are a reading of the advertisement. They are not extra hiring requirements.

• This is a platform seat, not a smart-contract audit seat.
• Policy-as-code that nobody adopts is not a control.
• Ask which state the band applies to before you compare it with another offer.

• Anything the compensation line does not already quote. A printed band is the employer’s sentence for the place they named — not a Blockchain Lab estimate, and not a promise for every location on the posting.
• Closing date, and the day the role was first published. The board timestamp is an update.
• Which countries may apply. “Remote” alone is not worldwide eligibility. If the employer wrote a country or a region, that sentence is theirs — still ask which entity can hire you.
• Visa sponsorship, the real on-call rota, and the employing subsidiary, unless the posting already named them.