Principal Information Security Engineer, ITC

Location: Karnataka, India

Time Type: Full time

Job Description

Become a Part of the NIKE, Inc. Team

NIKE, Inc. does more than outfit the world’s best athletes. It is a place to explore potential, obliterate boundaries and push out the edges of what can be. The company looks for people who can grow, think, dream and create. Its culture thrives by embracing diversity and rewarding imagination. The brand seeks achievers, leaders and visionaries. At NIKE, Inc. it’s about each person bringing skills and passion to a challenging and constantly evolving game.

WHO YOU’LL WORK WITH

You will report to the Directory of Cybersecurity Security Engineering. You will partner closely with Cyber Defense, Data Protection, Cloud Security, and Technology Operations teams to assess, analyze, and optimize operational tasks, functions and processes.

We’re looking for a Principal Information Security Engineer (NEST) located at our India Technology Center (ITC) location. This role provides hands-on technical and tactical expertise to a 24x7 team (Support during India business hours) of dedicated Information security engineers focused on maintaining operational stability while reducing risk. You will work on a team of experienced security professionals who are passionate about their work and Nike.

We are a diverse, cross-functional team that collaborates globally across the organization with a variety of stakeholders from service desk technicians to system architects, developers to technology managers. Our realm of capabilities and toolsets that we leverage include Endpoint Protection, email security, IDS/IPS, WAF, Proxy, PKI and Advanced Threat Protection.

WHO WE ARE LOOKING FOR

• Support the design, deployment, and ongoing maintenance of security controls that protect Nike’s systems and data.

• Assess, analyze, and optimize operational tasks, functions, and processes.

• Provide technical and tactical expertise to a 24x7 team during India business hours.

• Maintain proper saturation of endpoint security controls; versions, scoping and exclusions.

• Maintain the correct level of security controls for email security and enhance policies to strengthen the email security posture.

• Have skills and knowledge on cloud security policies and standards.

• Incident resolution regarding network security and firewall policies.

• Work with Business IT teams to continually improve the security posture of their application and solution portfolios.

• Contribute to the development of a multi-year business focused IT Security Solution Roadmap

• Contribute to the development of an annual Security roadmap outlining key initiatives in support of the Nike Information Security Strategy

• Contribute to designing a sustainable network security framework to allow secure technology standardization across multiple Nike business segments.

• Develop business cases for the adoption of new technology, standards, and processes.

• Review projects for security concerns and provide security guidance to business partners.

• Work with peers throughout Nike Inc. to collect input on needed security capabilities.

• Gain an understanding of the effectiveness of security policies and technologies.

• Support management in understanding architectural and operational information risk within/against Nike

• Collaborate with CIS teams when and as needed and work with outside of CIS teams as and when needed.

WHAT YOU’LL WORK ON

• You have strong problem-solving skills in 3 or more of the above listed capabilities/toolsets and thrive on your ability to determine root cause and provide relevant solutions.

• An Engineering and operational mindset is in your blood; the ad-hoc change of evening or weekend plans is seen as an opportunity to grow and excel.

• Have a minimum of 12 years of professional experience and want to contribute to a dynamic environment.

• Ability to juggle multiple priorities where you are the driving force ensuring completion and on-time delivery.

• Cloud, automation, and scripting aren’t just buzz words but synonymous with your delivery methods.

• Change is an opportunity, and ambiguity doesn’t rattle you.

• You leverage excellent written and verbal communication skills in a clear business relevant manner that is adjusted to the audience; up, down, and across the organization.

• Collaboration, mentoring and training members of your team are an innate core skillset.

• Passionate about security and are self-driven to be an expert.

• You rely on your previous enterprise experience and enjoy the challenge of slaying large and ever-changing technical dragons.

• Your formal education is, or work experience is similar to, a bachelor's degree in information technology, Information Security/Assurance, Engineering, or related field of study.

• Industry certifications relevant to the role: OSCP, SANS, CISSP, CEH is an added advantage.

NIKE, Inc. is a growth company that looks for team members to grow with it. Nike offers a generous total rewards package, a casual work environment, a diverse and inclusive culture, and an electric atmosphere for professional development. No matter the location, or the role, every Nike employee shares one galvanizing mission: To bring inspiration and innovation to every athlete* in the world. NIKE, Inc. is committed to employing a diverse workforce. Qualified applicants will receive consideration without regard to race, color, religion, sex, national origin, age, sexual orientation, gender identity, gender expression, veteran status, or disability.