Sr Staff, InfoSec Engineer - Security Architecture

About the Role

In this role, you will be part of the Security Architecture team within Product Security. Product Security is responsible for the security of applications from conception to steady state. Security Architecture focuses on secure design, threat modeling, and serving as the Security Partner for product teams. You will build relationships and collaborate with leaders, architects, and senior members of technical and product teams to understand the technical and business context of applications and processes, influencing decisions around risk and security.

What You'll Do

• Perform comprehensive security reviews for all projects within GapTech, including threat modeling and designing secure-by-default solutions.
• Develop and maintain relationships with teams delivering products within Gap Inc, including product and engineering leaders, to ensure security is integrated from the start.
• Act as a stakeholder and subject matter expert in decisions regarding maximum allowable risk. Collaborate with senior technical and product leads to assess project risks, required investments, and security controls.
• Work with teams to understand their development practices and technologies, and recommend appropriate security controls.
• Create and enforce security policies and standards.
• Assess potential security risks, communicate findings, and make recommendations to stakeholders and leadership. Partner with other Infosec teams to incorporate security feedback early and influence processes.
• Stay current with security trends and threats, and incorporate industry expertise into your work to protect applications and data.
• Provide training and education on security best practices to developers and business teams.

Who You Are

#J-18808-Ljbffr