Staff Infosec Engineer at Gap Inc. in San Francisco, California

Job Description:

About Gap Inc.

Our brands bridge the gaps we see in the world. Old Navy democratizes style to ensure everyone has access to quality fashion at every price point. Athleta unleashes the potential of every woman, regardless of body size, age or ethnicity. Banana Republic believes in sustainable luxury for all. And Gap inspires the world to bring individuality to modern, responsibly made essentials.    

This simple idea—that we all deserve to belong, and on our own terms—is core to who we are as a company and how we make decisions. Our team is made up of thousands of people across the globe who take risks, think big, and do good for our customers, communities, and the planet. Ready to  learn fast, create with audacity and lead boldly? Join our team.

About the Role

As a member of the InfoSec Cyber Defense team, you will play a crucial role in safeguarding our organization against cyber threats, fostering a culture of security awareness, and acting as a key escalation point for the Security Operations team. You will be responsible for identifying, analyzing, and responding to security incidents while collaborating with cross-functional teams to enhance our overall security posture.

What You'll Do

Cyber Threat Intelligence:

• Monitor, assess, and report on emerging cyber threats and vulnerabilities that may impact the organization.


• Analyze threat intelligence data to identify potential risks, attack vectors, and threat actors.


• Develop actionable intelligence reports and recommendations to inform security strategies and incident response activities.

Security Awareness:

• Design and implement security awareness programs to educate employees on best practices, potential threats, and secure behavior.


• Conduct regular security training sessions and simulations to ensure all staff understand their role in maintaining a secure environment.


• Evaluate the effectiveness of security awareness initiatives and make continuous improvements based on feedback and emerging threats.

Incident Response and Escalation:

• Serve as a primary escalation point for the Security Operations team to investigate and respond to security incidents.


• Perform in-depth analysis of incidents, determine root causes, and develop remediation plans.


• Collaborate with internal teams, including IT, Legal, and Compliance, to manage and mitigate security incidents effectively.

Fraud Prevention and Asset Protection:

• Support fraud prevention efforts by identifying, analyzing, and mitigating threats to financial and customer data.


• Work closely with the Asset Protection team to align cybersecurity efforts with physical security practices.


• Develop and maintain processes to detect and respond to fraud attempts and other malicious activities.

Policy and Procedure Development:

• Assist in the creation and maintenance of security policies, procedures, and standards.


• Ensure that all security measures comply with industry regulations and company standards.

Continuous Improvement:

• Stay current on the latest security trends, tools, and techniques to strengthen the organization's security posture.


• Participate in post-incident reviews to identify gaps and develop lessons learned for future improvements.

Who You Are

• Bachelor's degree in Computer Science, Information Security, Criminal Justice, or a related field, or equivalent experience.


• Proven experience in cybersecurity, cyber threat intelligence, or a similar role, preferably within a large organization.


• Strong knowledge of security principles, threats, vulnerabilities, and incident response.


• Experience in fraud prevention, asset protection, or a related field.


• Ability to analyze complex security data and provide actionable recommendations.


• Strong communication skills, with the ability to convey technical information to both technical and non-technical audiences.


• Excellent problem-solving and decision-making skills, with a proactive approach to identifying and addressing security risks.

Preferred

• Experience in a retail environment or understanding of the retail industry.


• Relevant certifications (e.g., Security+, CISSP, CISM, CISA) are a plus.


• Experience working in a Security Operations Center (SOC) or similar high-pressure environment.

Benefits at Gap Inc.

• Merchandise discount for our brands: 50% off regular-priced merchandise at Old Navy, Gap, Banana Republic and Athleta, and 30% off at Outlet for all employees.
• One of the most competitive Paid Time Off plans in the industry.*
• Employees can take up to five “on the clock” hours each month to volunteer at a charity of their choice.*
• Extensive 401(k) plan with company matching for contributions up to four percent of an employee’s base pay.*
• Employee stock purchase plan.*
• Medical, dental, vision and life insurance.*
• 
  See more of the benefits we offer.

*For eligible employees

Gap Inc. is an equal-opportunity employer and is committed to providing a workplace free from harassment and discrimination. We are committed to recruiting, hiring, training and promoting qualified people of all backgrounds, and make all employment decisions without regard to any protected status. We have received numerous awards for our long-held commitment to equality and will continue to foster a diverse and inclusive environment of belonging. In 2022, we were recognized by Forbes as one of the World's Best Employers and one of the Best Employers for Diversity.


Salary Range: $117,400 - $174,000 USD
Employee pay will vary based on factors such as qualifications, experience, skill level, competencies and work location. We will meet minimum wage or minimum of the pay range (whichever is higher) based on city, county and state requirements.



US CandidatesPlease note that effective, June 30, 2022, Gap Inc. will no longer require any of its employees to wear face masks or require proof of COVID vaccination, unless required by local or state/provincial mandates or as part of Gap Inc's quarantine guidelines after being exposed to or testing positive for COVID. Therefore, please disregard any language in any job posting that refers to Gap Inc.'s face mask and proof of vaccination policy as said policy is no longer effective.