Staff Engineer - DevSecOps

The Gap • San Francisco, CA

73d • $141,000 - $186,800

About The Position

At Gap Inc., we believe in bridging the gaps in the world through our brands. Old Navy democratizes style, Athleta empowers women, Banana Republic offers sustainable luxury, and Gap inspires individuality in responsibly made essentials. Our core belief is that everyone deserves to belong on their own terms, and this philosophy guides our decisions. We are a diverse team that takes risks, thinks big, and strives to do good for our customers, communities, and the planet. We invite you to join us if you're ready to learn quickly, create boldly, and lead with confidence. In this role, you will build security into every release and have the opportunity to grow into a leadership position with full support. You will design the pipelines, tools, and guardrails that enable developers to ship code quickly and safely. From day one, you will be responsible for high-impact decisions regarding automation, cloud infrastructure, and security strategy, with autonomy and mentorship to help you advance your career. You will work closely with engineering, product, and leadership teams, driving how applications transition from code to production while integrating security into CI/CD processes and shaping cloud architecture. Your influence will extend beyond implementation as you lead initiatives that secure systems and enhance software delivery confidence. You will work across multiple cloud platforms (Azure, GCP), modern CI/CD tools, and the latest security technologies, ensuring continuous learning and tackling real-world challenges.

Requirements

• Strong problem-solving skills with both strategic and hands-on depth in DevOps or security engineering
• Experience with CI/CD tools (GitHub Actions, Jenkins, or similar) and at least one scripting language (Python, Bash, Go, etc.)
• Solid understanding of cloud security concepts (IAM, network segmentation, secrets management) across Azure or GCP
• Hands-on familiarity with cloud security platforms such as Prisma Cloud and endpoint protection solutions like CrowdStrike for posture, runtime, and code analysis
• Experience implementing API security controls and embedding security practices throughout the software development lifecycle
• Confidence communicating security priorities with developers, stakeholders, and executives
• Background in Computer Science, Security, or equivalent practical experience

Responsibilities

• Designing and operating secure CI/CD pipelines with automated testing, SAST/DAST scanning, dependency checks, and secrets detection
• Implementing and tuning cloud security tools to monitor posture, runtime, and code security, ensuring continuous compliance and risk reduction
• Driving API security best practices and runtime protection across services and microservices
• Building and maintaining cloud infrastructure security controls using Terraform, Kubernetes, and container security best practices
• Embedding security into development workflows by partnering directly with product and engineering teams
• Monitoring vulnerabilities, triaging incidents, and driving rapid response across services and environments
• Setting policies and standards that balance speed of delivery with strong security posture

Benefits

• Merchandise discount for our brands: 50% off regular-priced merchandise at Old Navy, Gap, Banana Republic and Athleta, and 30% off at Outlet for all employees.
• One of the most competitive Paid Time Off plans in the industry.
• Employees can take up to five "on the clock" hours each month to volunteer at a charity of their choice.
• Extensive 401(k) plan with company matching for contributions up to four percent of an employee's base pay.
• Employee stock purchase plan.
• Medical, dental, vision and life insurance.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Industry: Clothing, Clothing Accessories, Shoe, and Jewelry Retailers
• Education Level: Bachelor's degree
• Number of Employees: 5,001-10,000 employees