WHO ARE WE LOOKING FOR
We’re looking for a Senior Engineer Vulnerability Management to be focused on the automation and integration of various security vulnerability assessment tools to drive accountability & visibility of Nike's high-risk findings. This role will work with multiple data sources, including all vulnerability data and other enterprise data, for contextual enrichment to drive actional output and automated vulnerability management lifecycle. In addition, this individual will work with technical and business teams to understand customer use cases for remediation of the vulnerabilities and provide solutions to create self-service visibility into security findings for mitigation and automated reporting. You will also improve Nike's security posture by advocating for security best practices and implementation. Ours is a fast-paced, forward-thinking team constantly innovating and passionate about data and risk reduction.
WHAT WILL YOU WORK ON
-
Developing automation & complex orchestration to scale out the vulnerability tools, output of vulnerability data and correlated (enrichment) data across the organization
-
Assist with maintaining pipeline integration of security tools into various development SDLCs
-
Educate Engineers, developers, and product teams on the importance of vulnerability management, effectively utilize the tools and remediate findings identified in an automated fashion
-
Continually evaluate the current state of the program; work with the team constantly find ways to automate and develop future roadmap
-
Communicate complex technical issues simply to different audiences
-
Ability to quickly learn new Information Security concepts and adapt to a fast-paced, ever-changing organization
WHO WILL YOU WORK WITH
This role is part of the Attack Surface Management team within Corporate Information Security (CIS) and reports to the local Director for Cyber Defense. You will work with teams within CIS, including the Nike Cyber Defense Center & Incident Response (NCDC/IR) and CIS Cyber Defense Management team.
WHAT YOU BRING
-
BS or MS degree preferred in computer science, information assurance
-
Expertise in interpreted languages (Python is a must) and high-level languages (Java script, .Net, PowerShell) with full-stack development experience
-
Hands on experience with ETL tools (i.e. Apache Nifi, MS-SSIS, jasper) and concepts
-
Software development background and strong knowledge of software development lifecycles
-
Previous experience deploying and maintaining configuration as code systems, services, containers and applications in AWS, Azure and/or GCP
-
Hands on experience with Vulnerability management tools such as Tenable, Rapid7, or Qualys, Twistlock
-
Ability to develop and communicate recommendations to management
-
Ability to translate technical security vulnerabilities into business risk
-
Strong problem-solving and conceptual thinking abilities
-
Strong ability to reverse engineer tools, exploits and open-source applications and ability to develop them
-
Experience looking for application security vulnerabilities such as Cross Site Scripting, SQL Injection, Cookie Manipulation, Buffer Overflows, etc.
-
In-depth familiarity with Windows and Unix Operating Systems
Top Skills
What We Do
At NIKE, Inc., it’s in our nature to innovate and our mission is to bring inspiration and innovation to every athlete* in the world [if you have a body, you’re an athlete]. Because we exist to serve athletes, we dare to design the future of sport. To us, innovation is about elevating human potential. We obsess over the needs of athletes of all abilities, using their insights to create products that are beautiful, useful and make all athletes better. To make big leaps, we take big risks. Incremental change won’t get us to where we want to go fast enough. So we pursue moonshots — like developing the first self-lacing shoe, running the first two-hour marathon and committing to 100% renewable energy use in our facilities. We embrace different perspectives — from scientists and designers to coders and quarterbacks — because we know everyone brings unique experiences and ideas to the team. To serve athletes across the hundreds of countries where NIKE does business, we need teams that truly reflect the diversity of our consumers and a culture of inclusivity. We aim to foster inclusion and embrace diversity throughout our business, teams, and culture to create breakthrough innovations, empower teammates to realize their full potential and bring us closer to the communities we serve. NIKE's diverse, high-performing teams around the world are united in purpose and inspired to change the world through sport.
Why Work With Us
With a global footprint, culture of innovation and team-first mentality, we take action to create a future of continual progress for athletes, sport and our world. Whether our job is designing the ultimate sneaker or coding a revolutionary app, we’re united by the same mission: to bring inspiration and innovation to every athlete in the world.
Gallery
.jpeg)
