Staff Engineer - DevSecOps

Staff Engineer - DevSecOps

Build security into every releaseand grow into leadership with full support. You'll design the pipelines, tools, and guardrails that let developers ship fast and safe. From day one, you'll own high-impact decisions on automation, cloud infrastructure, and security strategytrusted with autonomy and backed with mentorship to reach your next career level. You'll go deep technically while gaining visibility across engineering, product, and leadership. You'll drive how applications move from code to productionintegrating security into CI / CD, shaping cloud architecture, and setting standards teams rely on. As you embed yourself with squads, you'll build the influence to lead initiatives, not just implement them. Your work will secure more than systemsit will shape how the business delivers software with confidence. You'll work across multiple clouds (Azure, GCP), modern CI / CD platforms, and the latest security toolingcovering everything from runtime protection to code scanningstaying sharp through continuous learning and real-world challenges. Every win builds your leadership track record.

Designing and operating secure CI / CD pipelines with automated testing, SAST / DAST scanning, dependency checks, and secrets detection

Implementing and tuning cloud security tools to monitor posture, runtime, and code security, ensuring continuous compliance and risk reduction

Driving API security best practices and runtime protection across services and microservices

Building and maintaining cloud infrastructure security controls using Terraform, Kubernetes, and container security best practices

Embedding security into development workflows by partnering directly with product and engineering teams

Monitoring vulnerabilities, triaging incidents, and driving rapid response across services and environments

Setting policies and standards that balance speed of delivery with strong security posture

Strong problem-solving skills with both strategic and hands-on depth in DevOps or security engineering

Experience with CI / CD tools (GitHub Actions, Jenkins, or similar) and at least one scripting language (Python, Bash, Go, etc.)

Solid understanding of cloud security concepts (IAM, network segmentation, secrets management) across Azure or GCP

Hands-on familiarity with cloud security platforms such as Prisma Cloud and endpoint protection solutions like CrowdStrike for posture, runtime, and code analysis

Experience implementing API security controls and embedding security practices throughout the software development lifecycle

Confidence communicating security priorities with developers, stakeholders, and executives

Background in Computer Science, Security, or equivalent practical experience

Merchandise discount for our brands : 50% off regular-priced merchandise at Old Navy, Gap, Banana Republic and Athleta, and 30% off at Outlet for all employees.

One of the most competitive Paid Time Off plans in the industry.

Employees can take up to five "on the clock" hours each month to volunteer at a charity of their choice.

Extensive 401(k) plan with company matching for contributions up to four percent of an employee's base pay.

Employee stock purchase plan.

Medical, dental, vision and life insurance.

Gap Inc. is an equal-opportunity employer and is committed to providing a workplace free from harassment and discrimination. We are committed to recruiting, hiring, training and promoting qualified people of all backgrounds, and make all employment decisions without regard to any protected status. We have received numerous awards for our long-held commitment to equality and will continue to foster a diverse and inclusive environment of belonging. In 2022, we were recognized by Forbes as one of the World's Best Employers and one of the Best Employers for Diversity. Salary Range : $141,000 - $186,800 USD Employee pay will vary based on factors such as qualifications, experience, skill level, competencies and work location. We will meet minimum wage or minimum of the pay range (whichever is higher) based on city, county and state requirements.