Lead Information Security Engineer, ITC

Nike; Karnataka; On-site; INR 4,000,000 - 6,200,000; Full time

Job summary

NIKE, Inc. in India Technology Center seeks a Principal Information Security Engineer to lead security engineering for a 24x7 operations team. You will design, promote, and sustain controls across endpoints, networks, and cloud environments while guiding security policy and incident response.

You will collaborate with global teams to enhance the security posture of Nike's portfolios, mentoring engineers and driving multi-year roadmaps aligned with Nike’s security strategy.

Qualifications

• Bachelor's degree in information technology, information security/assurance, engineering, or related field.
• Industry certifications relevant to the role: OSCP, SANS, CISSP, CEH is an added advantage.
• 12+ years of professional information security experience.
• Experience with cloud security, security controls, and enterprise security architecture.

Responsibilities

• Support the design, deployment, and ongoing maintenance of security controls that protect Nike's systems and data.
• Assess, analyze, and optimize operational tasks, functions, and processes.
• Provide technical and tactical expertise to a 24x7 team during India business hours.
• Collaborate with CIS teams and business partners to strengthen security posture.

Skills

Security architecture

Incident response

Cloud security

Automation & scripting

Education

Bachelor's degree in IT/IS/Engineering

Tools

Endpoint Protection

IDS/IPS

WAF

Proxy

PKI

Advanced Threat Protection

Job description

Become a Part of the NIKE, Inc. Team

NIKE, Inc. does more than outfit the world's best athletes. It is a place to explore potential, obliterate boundaries and push out the edges of what can be. The company looks for people who can grow, think, dream and create. Its culture thrives by embracing diversity and rewarding imagination. The brand seeks achievers, leaders and visionaries. At NIKE, Inc. it's about each person bringing skills and passion to a challenging and constantly evolving game.

WHO YOU'LL WORK WITH

You will report to the Directory of Cybersecurity Security Engineering. You will partner closely with Cyber Defense, Data Protection, Cloud Security, and Technology Operations teams to assess, analyze, and optimize operational tasks, functions and processes.

We're looking for a Principal Information Security Engineer (NEST) located at our India Technology Center (ITC) location. This role provides hands-on technical and tactical expertise to a 24x7 team (Support during India business hours) of dedicated Information security engineers focused on maintaining operational stability while reducing risk. You will work on a team of experienced security professionals who are passionate about their work and Nike.

We are a diverse, cross-functional team that collaborates globally across the organization with a variety of stakeholders from service desk technicians to system architects, developers to technology managers. Our realm of capabilities and toolsets that we leverage include Endpoint Protection, email security, IDS/IPS, WAF, Proxy, PKI and Advanced Threat Protection.

WHO WE ARE LOOKING FOR

• Support the design, deployment, and ongoing maintenance of security controls that protect Nike's systems and data.
• Assess, analyze, and optimize operational tasks, functions, and processes.
• Provide technical and tactical expertise to a 24x7 team during India business hours.
• Maintain proper saturation of endpoint security controls; versions, scoping and exclusions.
• Maintain the correct level of security controls for email security and enhance policies to strengthen the email security posture.
• Have skills and knowledge on cloud security policies and standards.
• Incident resolution regarding network security and firewall policies.
• Work with Business IT teams to continually improve the security posture of their application and solution portfolios.
• Contribute to the development of a multi-year business focused IT Security Solution Roadmap
• Contribute to the development of an annual Security roadmap outlining key initiatives in support of the Nike Information Security Strategy
• Contribute to designing a sustainable network security framework to allow secure technology standardization across multiple Nike business segments.
• Develop business cases for the adoption of new technology, standards, and processes.
• Review projects for security concerns and provide security guidance to business partners.
• Work with peers throughout Nike Inc. to collect input on needed security capabilities.
• Gain an understanding of the effectiveness of security policies and technologies.
• Support management in understanding architectural and operational information risk within/against Nike
• Collaborate with CIS teams when and as needed and work with outside of CIS teams as and when needed.

WHAT YOU'LL WORK ON

• You have strong problem-solving skills in 3 or more of the above listed capabilities/toolsets and thrive on your ability to determine root cause and provide relevant solutions.
• An Engineering and operational mindset is in your blood; the ad-hoc change of evening or weekend plans is seen as an opportunity to grow and excel.
• Have a minimum of 12 years of professional experience and want to contribute to a dynamic environment.
• Ability to juggle multiple priorities where you are the driving force ensuring completion and on-time delivery.
• Cloud, automation, and scripting aren't just buzz words but synonymous with your delivery methods.
• Change is an opportunity, and ambiguity doesn't rattle you.
• You leverage excellent written and verbal communication skills in a clear business relevant manner that is adjusted to the audience; up, down, and across the organization.
• Collaboration, mentoring and training members of your team are an innate core skillset.
• Passionate about security and are self-driven to be an expert.
• You rely on your previous enterprise experience and enjoy the challenge of slaying large and ever-changing technical dragons.
• Your formal education is, or work experience is similar to, a bachelor's degree in information technology, Information Security/Assurance, Engineering, or related field of study.
• Industry certifications relevant to the role: OSCP, SANS, CISSP, CEH is an added advantage.

NIKE, Inc. is a growth company that looks for team members to grow with it. Nike offers a generous total rewards package, a casual work environment, a diverse and inclusive culture, and an electric atmosphere for professional de