Sr Staff, InfoSec Engineer - InfraSec

About the Role

We are hiring a highly skilled and experienced Senior Infrastructure Security Engineer. In this role, you will be responsible for designing, implementing, and maintaining the security posture of our network and cloud infrastructure. You will play a key role in identifying and mitigating security risks, ensuring compliance with industry best practices and regulations, and driving continuous improvement in our security operations. You will be a subject matter expert, mentoring junior engineers, and collaborating with cross-functional teams to deliver secure and reliable infrastructure solutions.

What You'll Do

• Provide infrastructure security design and implementation, delivering robust security controls for cloud (Azure, GCP, OCI), on-premises, and hybrid infrastructure environments.
• Develop and maintain infrastructure security architecture diagrams and documentation.
• Configure and manage security tools and technologies, including firewalls, intrusion detection / prevention systems (IDS / IPS), Network Access Controls (NAC), VPN & Zero Trust Network Access.
• Ensure compliance with relevant security standards and regulations (e.g., ISO 27001, NIST, SOC 2, PCI DSS). Participate in security audits and assessments.
• Build strong relationships with product and engineering teams within Gap Inc to ensure security is integrated from the outset.
• Develop, enforce, and maintain security policies and standards.
• Assess and communicate potential security risks, making recommendations to stakeholders and leadership. Collaborate with other Infosec teams to incorporate feedback early in the product lifecycle.
• Stay current with security trends, emerging threats, and develop deep industry expertise to keep the company's applications and data secure.

Who You Are

#J-18808-Ljbffr