Senior Information Security Engineer - Security Automation

About the role

Nike is hiring a Senior Security Automation Engineer within its India Technology Center (ITC) cyber security team, reporting to the Director, Cyber Security Engineering. The team works with Cyber Defense, Enterprise Cyber Security Consulting, Data Protection, Windows Client/Server Platform and Cloud Security/Automation teams to assess, analyze and optimize operational tasks, functions, documentation and processes. The role focuses on automating and integrating security tools to increase accountability and visibility of high-risk findings, and on building self-service visibility into security findings for mitigation and automated reporting.

Key responsibilities

• Work with multiple data sources to enrich context and drive action, covering the automated vulnerability management lifecycle
• Partner with technical and business teams to understand customer use cases for vulnerability and risk remediation and deliver solutions
• Advocate for security best practices and help improve Nike's security posture
• Develop automation and complex orchestration to scale vulnerability data and correlated enrichment data across the organization
• Build automated solutions with scripting languages such as Python, Ansible, Perl and PowerShell, integrating security tools into development SDLCs
• Educate engineers, developers and product teams on vulnerability management and risk, and help them remediate findings automatically
• Continuously evaluate the program, find more ways to automate and build the future roadmap
• Communicate complex technical issues simply to different audiences

Required profile

• Bachelor's or Master's degree preferred in computer science or information assurance
• Minimum 5+ years of relevant experience
• Full-stack development background and strong knowledge of software development lifecycles
• Experience deploying and maintaining configuration-as-code systems, services, containers and applications in AWS, Azure and/or GCP
• Ability to reverse engineer tools, exploits and open-source applications and to develop them
• Experience finding application security vulnerabilities such as XSS, SQL injection, cookie manipulation and buffer overflows
• Familiarity with Windows and Unix operating systems; cloud automation experience is an added advantage

Required skills

• Interpreted languages: Python (must); high-level languages JavaScript.NET, PowerShell
• ETL tools such as GitHub, Apache NiFi, MS-SSIS and Jasper
• Scripting languages such as Python, Ansible, Perl and PowerShell
• Cloud platforms: Azure, AWS, GCP and Alibaba Cloud