Principal Information Security Engineer, ITC

About the role

Nike is hiring a Principal Information Security Engineer (NEST) at its India Technology Center (ITC). The role reports to the Director of Cybersecurity Security Engineering and works with Cyber Defense, Data Protection, Cloud Security and Technology Operations teams. It supports a 24x7 team of information security engineers focused on operational stability and risk reduction, covering support during India business hours.

Key responsibilities

• Support the design, deployment and ongoing maintenance of security controls protecting Nike's systems and data.
• Maintain endpoint security control saturation, including versions, scoping and exclusions.
• Maintain email security controls and strengthen email security policies.
• Resolve incidents related to network security and firewall policies.
• Work with Business IT teams to improve the security of their application and solution portfolios.
• Contribute to a multi-year IT security solution roadmap and an annual security roadmap aligned with the Information Security Strategy.
• Help design a sustainable network security framework and develop business cases for new technology, standards and processes.
• Review projects for security concerns, gather input on needed security capabilities and support management in understanding information risk.

Required profile

• Minimum of 12 years of professional experience.
• Bachelor's degree in information technology, information security, engineering or a related field, or equivalent experience.
• Strong problem-solving skills, ability to handle multiple priorities and adapt to change.
• Excellent written and verbal communication and collaboration, mentoring and training skills.

Required skills

• Strong problem-solving in three or more of: Endpoint Protection, email security, IDS/IPS, WAF, Proxy, PKI and Advanced Threat Protection.
• Cloud security policies and standards.
• Cloud, automation and scripting in delivery methods.
• Relevant industry certifications such as OSCP, SANS, CISSP or CEH are an added advantage.