Staff Infosec Engineer

About Gap Inc.

Our past is full of iconic moments - but our future is going to spark many more. Our brands - Gap, Banana Republic, Old Navy and Athleta - have dressed people from all walks of life and all kinds of families, all over the world, for every occasion for more than 50 years.

But we're more than the clothes that we make. We know that business can and should be a force for good, and it's why we work hard to make product that makes people feel good, inside and out. It's why we're committed to giving back to the communities where we live and work. If you're one of the super-talented who thrive on change, aren't afraid to take risks and love to make a difference, come grow with us.
About the Role

We are seeking for a skilled and experienced Security controls specialist with ability to design, implement and manage security controls to join GAP Inc.'s cybersecurity team. In this role, you will be part of the Enterprise Security Team.
Enterprise Security comprises of Endpoint Protection and Cyber Resilience groups responsible to upkeep the security state of all the systems within the organization
What You'll Do

• Meticulous in ensuring all defined security measures are thoroughly implemented and well maintained
• Ability to Architect, implement and management of Endpoint Security controls like EDR, Anti Ransomware, SBOM, FIM, Local Firewalls, CASB, etc..
• Develop and maintain a comprehensive Software Bill of Materials (SBOM) for all software components used within the organization
• Collaborate with Security Ops & Infosec leadership in developing a mitigation plan for control gaps, TTP's, IOC's & Threat Advisories
• Supports Compliance & Risk Management activities related to Endpoint Security
• Ensure compliance with industry standards and regulatory requirements related to SBOM and endpoint protection, and develop and maintain relevant policies, procedures, and best practices
• Provide technical support, including monitoring, reporting, and tool administration
• Maintain and update documentations & architectural workflows of security solutions
• Configure and manage the logging of security controls from various sources into the SIEM solution
• Create and manage plans for implementation projects and keep them current
• Raise concerns to management regarding endpoint security deficiencies or enhancements that need to be addressed
• Educate the partnering teams on SBOM & Endpoint Protection processes and security best practices, and stay updated on the latest security trends, tools, and technologies
• Assist in the investigation and response to security incidents related to vulnerabilities, coordinating with incident response teams to mitigate the impact of security breaches

• Bachelor's degree in Computer Science, Information Security, or a related field. Advanced degrees and relevant certifications (e.g., CISSP, CISM, CEH) are preferred.
• 10+ years of directly related experience in SBOM Management, Endpoint Protection, Cybersecurity or related field
• Proficiency in SBOM tools and endpoint protection solutions, and experience with security frameworks and standards (e.g., NIST, ISO 27001)
• Strong analytical and problem-solving skills, with the ability to assess complex security issues and develop effective solutions
• Excellent written and verbal communication skills, with the ability to convey technical information to non-technical stakeholders
• Proven understanding of Common Vulnerability Frameworks (CVE, CVSS, OWASP Top 10)
• Proven ability to lead and mentor teams, and to work collaboratively with cross-functional teams

• Leads with a Growth Mindset.
• Cultivates a Trusting Environment.
• Drives what Matters.
• Works with a 'One Team' Approach.

• One of the most competitive paid time off plans in the industry
• Comprehensive health coverage for employees, same-sex partners and their families
• Health and wellness program: free annual health check-ups, fitness center and Employee Assistance Program
• Comprehensive benefits to support the journey of parenthood
• Retirement planning assistance
• See more of the benefits we offer.