Gap Inc. Hiring for Staff Infosec Engineer at Hyderabad, India Full Time

About Gap Inc.

Our past is full of iconic moments — but our future is going to spark many more. Our brands — Gap, Banana Republic, Old Navy and Athleta — have dressed people from all walks of life and all kinds of families, all over the world, for every occasion for more than 50 years.

But we’re more than the clothes that we make. We know that business can and should be a force for good, and it’s why we work hard to make product that makes people feel good, inside and out. It’s why we’re committed to giving back to the communities where we live and work. If you’re one of the super-talented who thrive on change, aren’t afraid to take risks and love to make a difference, come grow with us.

About the Role

In this role you will be part of the Security Architecture team within Product Security. Product Security as a whole is responsible for the security of applications from conception to steady state, and within that Security Architecture is responsible for the secure design and threat modeling as well as serve as the Security Partner for product teams. You will build relationships and collaborate with senior members of technical and product teams to understand the technical & business context around applications and processes and influence decisions around maximum allowable risk and securing applications and data

What You’ll Do

• As a team we perform security reviews for all projects within GapTech. This will include threat modelling and designing secure-by-default solutions.

• Develop and maintain deep relationships with the various teams delivering products within Gap Inc including product and engineering leaders to ensure security is built in from the start.

• Act as a key stakeholder and subject matter expert in decisions around maximum allowable risk. Collaborate with senior technical and product leads to assess when projects can proceed as is, what risks can be accepted, what investment & tooling are required to address any open security concerns, and what fundamental security building blocks in terms of technology and processes need to be put in place by GapTech.

• Work closely with teams to understand dev practices and technologies leveraged to deliver products and use that knowledge to build and recommend security controls appropriate to them.

• Create security policies and standards and enforce them.

• Assess and communicate potential security risks and make recommendations to stakeholders and leadership. Collaborate and partner with other Infosec teams to incorporate feedback early in the application lifecycle as well as influence processes in other parts of Infosec.

• Stay current with the latest security trends, threats and develop and maintain deep industry expertise to incorporate it into your work to ensure the company’s applications and data remain secure.

• Providing training and education to developers and business teams on security best practices.

Who You Are

• Senior Infosec engineer with 8+ experience working as security architect or security partner with development teams. Alternately, a senior developer looking to pivot to Infosec and leverage development background to work closer with technical teams.

• Strong technical knowledge and understanding of modern web application such as React, Node.js, APIs, OAuth, etc. and cloud infrastructure technologies such as Azure, GCP, Kubernetes, etc.

• Strong problem-solving skills and ability to perform technical analysis at both a high and low level of detail. Ability to assess relatively complex situations and analyze data to make independent judgments and recommend solutions.

• Effective written and verbal communication skills with the ability to collaborate and interact across teams and at varying levels of management. Ability to communicate difficult concepts in a simple manner.

• Ability to filter, prioritize, and organize work appropriately to meet and exceed goals.

• Aptitude to understand technical solutions and business processes quickly

• Strong negotiation skills to influence decisions while working with senior technical architects and business leaders

Benefits at Gap Inc.

• One of the most competitive paid time off plans in the industry

• Comprehensive health coverage for employees, same-sex partners and their families

• Health and wellness program: free annual health check-ups, fitness center and Employee Assistance Program

• Comprehensive benefits to support the journey of parenthood

• Retirement planning assistance

• See more (https://corporate.gapinc.com/en-in/careers/gap-inc-benefits) of the benefits we offer.

Gap Inc. is an equal-opportunity employer and is committed to providing a workplace free from harassment and discrimination. We are committed to recruiting, hiring, training and promoting qualified people of all backgrounds, and make all employment decisions without regard to any protected status. We have received numerous awards for our long-held commitment to equality and will continue to foster a diverse and inclusive environment of belonging. In 2022, we were recognized by Forbes as one of the World’s Best Employers and one of the Best Employers for Diversity.