Staff Infosec Engineer - Compliance

About the Role In this role you will develop the tools necessary to keep our companys assets and information secure, including Cloud Security, Infrastructure Security, Product Security, Defensive Engineering, and Identity and Access Management. What Youll Do

• Design, develop, implement information security solutions This may include but is not limited to the following areas: Cloud Security, Infrastructure Security, Product Security, Defensive Engineering, and Identity and Access Management

• Demonstrate advanced knowledge of infrastructure standard security practices, concepts and technologies relevant to role. Is an advocate for these standards and practices across the organization.

• Implement security controls governing CI/CD pipelines, and provide technical advisory support across a rapidly modernizing and dynamic hybrid multi cloud, on prem and retail chain environment

• Ensure governance and compliance with legal and regulatory requirements while maintaining Gap Inc Information Security policies, standards, and industry best practices

• Drive automation of cloud security processes

• Regularly influence leadership team decisions and initiatives

• Demonstrate knowledge of infrastructure standard security practices, concepts and technologies relevant to specific role

• Demonstrate Proficiency in specific security technologies, applications, standards and methodologies

• Partner with product teams and leadership to identify opportunities to deliver technical solutions for the business that drive sales and operational improvements.

• Develop innovative solutions for complex situations in a fast changing environment; cover a wide range of activities requiring complex judgments

• Strong Java/J2EE development experience; Strong scripting skills