Staff Infosec Engineer

About the Role We are seeking an experienced Infrastructure Security Specialist and Strategist to join GAP Inc. s cybersecurity team. In this role, the Staff Infosec Engineer will cater to the needs of the business, engage with product teams, be responsible for engineering, incident handling and operational support activities across network / infrastructure security in a hybrid cloud environment, ensuring governance and compliance, up-keeping of Gap Inc. Information Security policies, standards, and security best practices. What Youll Do

Roles Responsibilities:

• Develop and deploy robust security architectures to protect organizational networks from cyber threats.
• Continuously oversee network security systems, ensuring they are up-to-date and functioning optimally.
• Regularly perform penetration tests to identify and address vulnerabilities within the network.
• Create and enforce comprehensive security policies and protocols to safeguard sensitive data.
• Conduct regular security audits against the organization s global network infrastructure for signs of vulnerabilities, intrusions, and ensure security measures in place.
• Work closely with other IT departments to integrate security measures into all aspects of the organizations IT infrastructure.
• Keep abreast of the latest cybersecurity trends, threats, and technologies to proactively protect the network.
• Interact with internal and external teams, ensure security issues are resolved in a timely manner and business needs are met in adherence to InfoSec architectural goals and principles

What are we looking for

• Bachelor s degree in related filed, to include computer science, or equivalent combination of education and experience
• Minimum of 8 years in network security engineering, with a proven track record of managing and securing complex network environments.
• Proficiency in network protocols, firewalls, VPNs, IDS/IPS, and other security tools.
• Hands-on experience securing hybrid and cloud native infrastructure is highly preferred
• Extensive experience working with Network Security technologies, including ZTNA, Palo Alto, Aruba ClearPass, Segmentation concepts and Cloud ( Azure or AWS) security related technologies.
• Familiarity with GitHub CI/CD pipelines
• Good understanding of privacy and compliance standards i.e. PCI 4.0
• DevOps background and experience in scripting i.e Python, Java Scripting, Shell, PowerShell, etc is a plus
• Proven understanding of Networking Concepts protocols including BGP, OSPF
• Strong analytical and problem-solving skills, with the ability to assess complex security issues and develop effective solutions
• Excellent written and verbal communication skills, with the ability to convey technical information to non-technical stakeholders
• Possess one or more advanced professional security certifications related to chosen discipline (PaloAlto certification, Azure / AWS)
• Keen attention to detail to ensure thorough and accurate security assessments and implementations.

Competencies:

• Leads with a Growth Mindset.
• Cultivates a Trusting Environment.
• Drives what Matters.
• Works with a One Team Approach.