Staff Engineer - DevSecOps

The Gap • New York, NY

73d • $141,000 - $186,800

About The Position

At Gap Inc., we believe in bridging the gaps in the world through our brands. Old Navy democratizes style, Athleta empowers women, Banana Republic offers sustainable luxury, and Gap inspires individuality in responsibly made essentials. Our core belief is that everyone deserves to belong on their own terms, and we strive to create a workplace that reflects this. As part of our team, you will have the opportunity to take risks, think big, and contribute positively to our customers, communities, and the planet. We are looking for individuals ready to learn quickly, create boldly, and lead with confidence. In this role, you will be responsible for integrating security into every release while also having the opportunity to grow into a leadership position with full support. You will design pipelines, tools, and guardrails that enable developers to ship code quickly and safely. From day one, you will make high-impact decisions regarding automation, cloud infrastructure, and security strategy, with autonomy and mentorship to help you advance in your career. You will work closely with engineering, product, and leadership teams, driving how applications transition from code to production, integrating security into CI/CD processes, shaping cloud architecture, and establishing standards for teams to follow. Your work will not only secure systems but also influence how the business delivers software confidently, utilizing multiple cloud platforms (Azure, GCP), modern CI/CD tools, and the latest security technologies.

Requirements

• Strong problem-solving skills with both strategic and hands-on depth in DevOps or security engineering
• Experience with CI/CD tools (GitHub Actions, Jenkins, or similar) and at least one scripting language (Python, Bash, Go, etc.)
• Solid understanding of cloud security concepts (IAM, network segmentation, secrets management) across Azure or GCP
• Hands-on familiarity with cloud security platforms such as Prisma Cloud and endpoint protection solutions like CrowdStrike for posture, runtime, and code analysis
• Experience implementing API security controls and embedding security practices throughout the software development lifecycle
• Confidence communicating security priorities with developers, stakeholders, and executives
• Background in Computer Science, Security, or equivalent practical experience

Responsibilities

• Designing and operating secure CI/CD pipelines with automated testing, SAST/DAST scanning, dependency checks, and secrets detection
• Implementing and tuning cloud security tools to monitor posture, runtime, and code security, ensuring continuous compliance and risk reduction
• Driving API security best practices and runtime protection across services and microservices
• Building and maintaining cloud infrastructure security controls using Terraform, Kubernetes, and container security best practices
• Embedding security into development workflows by partnering directly with product and engineering teams
• Monitoring vulnerabilities, triaging incidents, and driving rapid response across services and environments
• Setting policies and standards that balance speed of delivery with strong security posture

Benefits

• Merchandise discount for our brands: 50% off regular-priced merchandise at Old Navy, Gap, Banana Republic and Athleta, and 30% off at Outlet for all employees.
• One of the most competitive Paid Time Off plans in the industry.
• Employees can take up to five "on the clock" hours each month to volunteer at a charity of their choice.
• Extensive 401(k) plan with company matching for contributions up to four percent of an employee's base pay.
• Employee stock purchase plan.
• Medical, dental, vision and life insurance.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Industry: Clothing, Clothing Accessories, Shoe, and Jewelry Retailers
• Education Level: Bachelor's degree
• Number of Employees: 5,001-10,000 employees