Avatar for Gap, Inc
Be creative. Take risks. Do what’s right. Stay focused on customers

Manager, DevSecOps Engineering

Posted: 5 months ago
Hires remotely in
Remote Work Policy

Remote only

Company Location
Visa Sponsorship

Not Available

RelocationAllowed
Skills
Python
Java
Bash
Cloud Security
Automated Testing
Security Policies
best practices
Standards
code security
product security
Go
Infrastructure security
SAST
Infrastructure-As-Code
Cloud Security Posture Management
Ci/Cd Pipeline Security
Secrets Detection
Runtime Protection
API Security Standards
Dependency Checks
DAST Scanning
Container Orchestration Tooling

About the job

About the Role

In this role, you will lead the strategy, design, and delivery of security engineering solutions that protect the company's assets, infrastructure, and software supply chain. You will manage a team of security and DevOps engineers, driving a culture of security-first delivery across Cloud Security, CI/CD Pipeline Security, Product Security and Infrastructure Security. You will partner closely with Engineering, Product, and Leadership to set direction and ensure the business ships software with speed and confidence.

What You'll Do

  • Lead the design, development, and implementation of information security solutions across Cloud Security, Infrastructure Security & Product Security.
  • Own the security strategy for CI/CD pipelines, including automated testing, SAST/DAST scanning, dependency checks, and secrets detection — providing technical advisory and governance across hybrid, multi-cloud environments.
  • Drive cloud security posture management, runtime protection, and code security through industry-leading cloud security and edge protection capabilities, ensuring continuous compliance and risk reduction.
  • Define and enforce security policies, standards, and best practices that balance delivery speed with a strong security posture, in alignment with regulatory and legal requirements.
  • Lead automation initiatives across cloud security processes, reducing manual effort and improving consistency at scale.
  • Oversee API security standards and runtime protection across services and microservices architectures.
  • Manage infrastructure security controls using infrastructure-as-code and container orchestration tooling, in line with container security best practices.
  • Anticipate operational and program risks, developing preventative measures and driving rapid incident response across environments.
  • Translate functional security requirements into technical roadmaps, guiding your team from strategy through to execution.
  • Define, track, and communicate security metrics and key performance indicators — creating actionable insights from data to inform prioritization, demonstrate delivery effectiveness, and drive continuous improvement.
  • Build strong cross-functional relationships with product and engineering squads, embedding security into development workflows and acting as a trusted security advisor at the leadership level.

Who You Are

  • A proven leader with hands-on depth in DevSecOps or security engineering, and the ability to inspire, grow, and manage a high-performing team.
  • Demonstrate deep knowledge of infrastructure security practices, concepts, and technologies, with proficiency across cloud security capabilities and modern security methodologies.
  • Experience governing CI/CD pipelines and authoring configuration management and deployment tooling across modern CI/CD platforms.
  • Strong scripting and development skills across languages such as Python, Bash, Go, or Java.
  • Solid understanding of cloud security concepts including network segmentation and secrets management across major cloud providers.
  • Experience anticipating operational risks and driving preventative measures across complex, fast-moving engineering environments.
  • A confident communicator who can translate security priorities to developers, stakeholders, and executives alike.
  • Familiarity with AI and machine learning capabilities as applied to DevSecOps and infrastructure management — including AI-assisted threat detection, anomaly detection, intelligent vulnerability triage, and the use of AI-powered tooling to enhance security automation and operational insight — is considered a strong advantage.
  • Background in Computer Science, Information Security, or equivalent practical experience.

About the company

Gap, Inc  company logo
Be creative. Take risks. Do what’s right. Stay focused on customers5000+ Employees
Learn more about Gap, Inc  image

Funding

AMOUNT RAISED
$2.3B
FUNDED OVER
1 round
Round
S
$2250000000
Seed - May 2020

Similar Jobs

Astranis company logo
Astranis
Building next-generation internet satellites to get the world online
Scale AI company logo
Scale AI
Accelerate the development of AI applications
Orchard Robotics company logo
Orchard Robotics
Securing America's food supply by building the AI farmer that automates our nation's farms
EliseAI company logo
EliseAI
Building AI agents that transform complex healthcare and housing systems
NumeralHQ company logo
NumeralHQ
Sales tax on autopilot for Ecommerce & SaaS ✨ Spend 5 mins or less per month on compliance
Postman company logo
Postman
Postman is the world’s leading collaboration platform for API development
Postman company logo
Postman
Postman is the world’s leading collaboration platform for API development