Security Engineer

Description

Lead Security EngineerThe Lead Security Engineer reports to the Director of Data & Infrastructure Protection, and is a member of a larger Security Engineering and Operations (SecOps) organization that designs, deploys and operates security tools. The Engineer will also be architecting solutions and services deploying security in depth across Gap Inc. Responsibilities You'll be pushing the boundaries of security technology to create defenses for large scale production infrastructure, enterprise systems, and cloud services Provide subject matter expertise on architecture, encryption, and systems security Lead in security project initiatives and liaison to DevOps for security best practices Perform security assessments of production, corporate, and cloud infrastructure Harden our clients, servers, and networks against exploitation and privilege escalation Instrument systems to enable detection of intrusions and abuse Create services and tools to secure our data Required Skills Bachelor's degree in Computer Science or a related discipline 5+ years of experience building secure systems, networks and infrastructure Indepth knowledge of vulnerability assessment tools (e.g. Qualys, Rapid7, etc.) and system hardening Strong knowledge of encryption and tokenization technologies Proficient in at least one scripting language (e.g. Python, Ruby, etc.) Strong Knowledge of DBMS security Desire to automate manual tasks via Chef, Puppet Experience with incident response and forensics a plus Experience with DevOps a strong plus Experience with securing cloud computing platform (e.g. Amazon AWS, Microsoft Azure, Google App Engine, etc.) Certificates CISSP, CEH, OSCP preferred