Sr Staff, InfoSec Engineer - Security Architecture (San Francisco)

Sr Staff, Infosec Engineer - Security Architecture

Full time Two Folsom, San Francisco, CA, US 94105

About Gap Inc.

Our brands bridge the gaps we see in the world. Old Navy democratizes style to ensure everyone has access to quality fashion at every price point. Athleta unleashes the potential of every woman, regardless of body size, age or ethnicity. Banana Republic believes in sustainable luxury for all. And Gap inspires the world to bring individuality to modern, responsibly made essentials. This simple ideathat we all deserve to belong, and on our own termsis core to who we are as a company and how we make decisions. Our team is made up of thousands of people across the globe who take risks, think big, and do good for our customers, communities, and the planet. Ready to learn fast, create with audacity and lead boldly? Join our team.

About the Role

In this role, you will be part of the Security Architecture team within Product Security. Product Security as a whole is responsible for the security of applications from conception to steady state, and within that Security Architecture is responsible for the secure design and threat modeling as well as to serve as the Security Partner for product teams. You will build relationships and collaborate with leaders, architects and senior members of technical and product teams to understand the technical & business context around applications and processes and influence decisions around maximum allowable risk and securing applications and data.

What You'll Do

• As a team we perform comprehensive security reviews for all projects within GapTech. This will include threat modeling and designing secure-by-default solutions.
• Develop and maintain deep relationships with the various teams delivering products within Gap Inc including product and engineering leaders to ensure security is built in from the start.
• Act as a key stakeholder and subject matter expert in decisions around maximum allowable risk. Collaborate with senior technical and product leads to assess when projects can proceed as is, what risks can be accepted, what investment & tooling are required to address any open security concerns, and what fundamental security building blocks in terms of technology and processes need to be put in place by GapTech.
• Work closely with teams to understand dev practices and technologies leveraged to deliver products and use that knowledge to build and recommend security controls appropriate to them.
• Create security policies and standards and enforce them.
• Assess and communicate potential security risks and make recommendations to stakeholders and leadership. Collaborate and partner with other Infosec teams to incorporate feedback early in the application lifecycle as well as influence processes in other parts of Infosec.
• Stay current with the latest security trends, threats and develop and maintain deep industry expertise to incorporate it into your work to ensure the company's applications and data remain secure.
• Providing training and education to developers and business teams on security best practices.

Who You Are

Benefits at Gap Inc.

Gap Inc. is an equal-opportunity employer and is committed to providing a workplace free from harassment and discrimination. We are committed to recruiting, hiring, training and promoting qualified people of all backgrounds, and make all employment decisions without regard to any protected status. We have received numerous awards for our long-held commitment to equality and will continue to foster a diverse and inclusive environment of belonging. In 2022, we were recognized by Forbes as one of the World's Best Employers and one of the Best Employers for Diversity. Salary Range : $174,400 - $231,200 USD Employee pay will vary based on factors such as qualifications, experience, skill level, competencies and work location. We will meet minimum wage or minimum of the pay range (whichever is higher) based on city, county and state requirements.