Attack Service Mgmt Lead Security Eng.

Nike Beaverton, OR

About the Job

Job Description


Nike, Inc. Technology is responsible for making the world's largest sport brand run faster, smarter and more securely. From infrastructure to security and supply chain operations, Technology specialists drive growth through top-flight hardware, software and enterprise applications. Global Technology aggressively innovates solutions to drive growth while creating and implementing tools that help make everything else in the company possible.

Description

Nike, Inc. Technology is responsible for making the world's largest sport brand run faster, smarter and more securely. From infrastructure to security and supply chain operations, Technology specialists drive growth through top-flight hardware, software and enterprise applications. Global Technology aggressively innovates solutions to drive growth while creating and implementing tools that help make everything else in the company possible.

Nike Tech brings together technology and process expertise to create value for the consumer. We deliver one-stop, integrated process and technology capabilities that enable Nike, Inc.'s businesses and brands worldwide. Our focus is on providing Lean solutions that eliminate waste, maximize consumer value, and drive profitable business growth. Nike provides a unique global environment and diverse business; retail, marketing, manufacturing, and supply chain logistics. Attack Surface Management (ASM) is a key capability in our Information Security function.

We are a diverse and cross functional team that collaborates with a variety of technical stakeholders from application developers to infrastructure operations teams. The Attack Surface Management team proactively assesses Nike's networks, applications and mobile experiences looking for gaps in Information Security best practices. We manage a variety of security tools and develop automation & integrations to further scale our technical solutions. Here at Nike, we win as a team and are looking for individuals with a passion for information security to join our unique culture & environment.

As a Lead Security Engineer on Nike's Attack Surface Management team your role is to provide technical expertise in the space of Application Security, with a focus on secure software development lifecycle (SSDLC) practices such as static code analysis, dynamic web application assessments & component lifecycle management. Not only will you be maintaining, innovating and managing the underlying security technologies, but assist with consulting with application developers on remediation techniques for common security software flaws.

Qualifications

  • Demonstrate strong technical security expertise in picking apart web applications, mobile apps, web services, APIs and network configurations utilizing both commercial and open source products
  • You have excellent written and verbal communication skills and enjoy speaking with developers and other technology stakeholders to advocate for security best practices and provide technical guidance on the risk of vulnerabilities or misconfigurations
  • You are familiar with and have developed integrations with a variety of software development lifecycle practices, tools, pipelines and continuous delivery models
  • Strong understanding of secure coding practices and can provide code remediation guidance in a wide array of programming and scripting languages
  • Have previous enterprise experience and are challenged by evaluating a variety of technical environments from retail locations, distribution centers, IoT, and a variety of cloud environments
  • Proactively engage & enjoy mentoring and training members of attack surface management team and other technology teams
  • You take pride in being diligent and self-driven
  • Your ethics and ability to manage sensitive material are unquestionable