Senior Information Security Engineer, Insider Threat, ITC

WHO WILL YOU WORK WITH

You will be part of Corporate Information Security (CIS), reporting into the Data Protection Engineering team under Insider Threat.  You will work closely with other CIS, Technical Operations, and Deskside Support teams.

WHAT WILL YOU WORK ON

You'll be working with the Data Protection team and performing these key tasks:

• Deployment and support of data loss prevention tools and capabilities across a globally distributed environment

• Identify and implement opportunities to mature the Data Protection Platform Operations program in partnership with Data Protection Core Engineering and other technology partners

• Work with peers throughout Nike Inc. to collect input on needed security capabilities

• Coordinate troubleshooting activities with end users and collect details for investigations, coordinating with other engineering resources and our vendor partners

• Perform Quality Assurance tests on a variety of applications to ensure compatibility

• Gain understanding of the effectiveness of security policies and technologies

• Contribute to the development of an annual Security roadmap outlining key initiatives in support of the Nike Information Security Strategy

• Support management in understanding architectural and operational information risk within/against Nike

• Develop business cases for the adoption of new technology, standards, and processes

• Participate in projects or programs with significant risk and complexity to achieve milestones and objectives, modeling reliability and optimism

• Staying current on security technologies, trends, standards, and best practices.

• Continually update relevant security skills

• Other duties and responsibilities as assigned

WHO ARE WE LOOKING FOR

As a Senior Information Security Engineer on our Insider Threat team, you will use your knowledge of international standards, industry best practices, professional experience, collaboration, and good judgment to implement an information security strategic roadmap focused on monitoring and protecting Nike's most sensitive digital information. This role will be part of a team that is responsible for developing, implementing, and maintaining security technology footprint for data loss prevention which allows Nike to move rapidly and securely into new business enabling technologies.

You bring with yourself:

• A bachelor's degree in computer science or related filed, or equivalent work experience

• 4+ years of information technology experience with a minimum of 3 years in an information security related role

  • Knowledge of information security standards, principles, and practices

  • Demonstrated relevant security expertise in implementing, deploying, and supporting secure solutions and services for a mix of the following areas:

    • Enterprise Data Loss Prevention, including SaaS-based DLP and on-prem Data Loss Prevention capabilities 

    • CASB solutions (API-based and inline)

    • Workstation Operating Systems (Windows / MacOS)

    • Enterprise Digital Rights Management capabilities

    • Office 365 security capabilities

    • Enterprise Device Management capabilities

    • Knowledge and experience in national and international privacy laws and regulations

      • Demonstrated proficiency at the techniques that go into the implementation of solution architectures, including requirements discovery and analysis, application of abstraction, formulation of solution context, solution alternatives identification and assessment, technology selection, and implementation

      • The ability to assess risk and translate it to business relevant considerations and facts

      • The ability to learn and apply new concepts quickly

      • Proven analytical and problem-solving ability

      • Excellent communication, balancing details and context and demonstrating good judgement with timely updates, risks, and opportunities

      • Excellent organization, and interpersonal skills with the ability to appropriately communicate and translate complex security risks to dollars

      • Ability to balance and prioritize work

      • Must be trustworthy in keeping sensitive data confidential