Senior Information Security Platform Engineer

Rejoignez l'équipe NIKE, Inc. Loin de se contenter d'équiper les plus grands athlètes mondiaux, NIKE, Inc. explore les potentiels, abolit les frontières et repousse les limites du possible. L'entreprise recherche des personnes capables d'évoluer, de réfléchir, de rêver et de créer. L'épanouissement de sa culture repose sur son ouverture à la diversité et sur sa façon d'encourager l'imagination. La marque a besoin de personnes talentueuses, de leaders et de visionnaires. Chez NIKE, Inc., chacun contribue, par ses compétences et sa passion, à jouer un match difficile en constante évolution. NIKE est une entreprise de technologie. De notre site Web phare à nos applications mobiles cinq étoiles en passant par le développement de produits, la gestion des big data, l'ingénierie de pointe et la prise en charge des systèmes, les équipes NIKE Global Technology s'efforcent de révolutionner le futur, à la croisée de la technologie et du sport. Nous investissons dans la technologie et mettons au point des innovations ; nous employons les personnes les plus créatives au monde et leur donnons les clés pour innover, apporter les modifications nécessaires et servir les clients de façon plus directe et personnelle. Nos équipes innovantes, hétérogènes, multidisciplinaires et collaboratives imaginent les technologies de demain et en font profiter le monde entier. WHO ARE WE LOOKING FOR We’re looking for an Senior Information Security Platform Engineer. This role on the team will be focused on the automation and integration of various security tools to drive accountability & visibility of Nike's high-risk findings. Work with multiple data sources, including all data and other enterprise data, for contextual enrichment to drive actional output and automated vulnerability management lifecycle. In addition, you will work with technical and business teams to understand customer use cases for remediation of vulnerabilities/Risks and provide solutions to create self-service visibility into security findings for mitigation and automated reporting. You will also improve Nike's security posture by advocating for security best practices and implementation. Ours is a fast-paced, forward-thinking team constantly innovating and passionate about data and risk reduction.  WHAT WILL YOU WORK ON Developing automation & complex orchestration to scale out the vulnerability or risks, output of vulnerability data and correlated (enrichment) data across the organization. Assist in developing automated solutions with scripting language like Python, Ansible, Perl, Powershell etc. with maintaining pipeline integration of security tools into various development SDLCs. Educate Engineers, developers, and product teams on the importance of vulnerability management (Risks), effectively utilize the tools and remediate findings identified in an automated fashion. Continually evaluate the current state of the program; work with the team constantly find ways to automate and develop future roadmap. Communicate complex technical issues simply to different audiences. Ability to quickly learn new Information Security concepts and adapt to a fast-paced, ever-changing organization. Will be working on Azure, AWS, GCP and AliCloud cloud platforms to automate our security challenges. WHO WILL YOU WORK WITH This role is part of the CSD (Cyber security solutions delivery) team within Corporate Information Security (CIS) and reports to the local Director for CSD. You will work with teams within CIS. WHAT YOU BRING You should have 5+ years of total experience.Bachelor’s or Master’s degree preferred in computer science, information assurance Expertise in interpreted languages (Python is a must) and high-level languages (Java script, .Net, PowerShell) with full-stack development experience Hands on experience with ETL tools (i.e. GIT hub, Apache Nifi, MS-SSIS, jasper) and concepts Software development background and strong knowledge of software development lifecycles Previous experience deploying and maintaining configuration as code systems, services, containers and applications in AWS, Azure and/or GCP Ability to develop and communicate recommendations to management Ability to translate technical security vulnerabilities into business risk through automation. Strong problem-solving and conceptual thinking abilities Strong ability to reverse engineer tools, exploits and open-source applications and ability to develop them Experience looking for application security vulnerabilities such as Cross Site Scripting, SQL Injection, Cookie Manipulation, Buffer Overflows, etc. Familiarity with Windows and Unix Operating Systems If someone has worked on cloud automation would be an added advantage. NIKE, Inc. est une entreprise en pleine croissance cherchant à intégrer à son équipe des personnes capables de se développer avec elle. Nike offre un généreux programme de rémunération globale, un environnement de travail décontracté, une culture variée et inclusive et une atmosphère dynamique propice au développement professionnel. Quels que soient le site ou le poste, les employés de Nike partagent tous la même mission stimulante : apporter inspiration et innovation aux athlètes* du monde entier. NIKE, Inc. s'engage à embaucher un personnel diversifié. Les candidats qualifiés seront considérés sans tenir compte de leur origine, couleur de peau, religion, sexe, nationalité, âge, orientation sexuelle, identité de genre, expression de genre, statut de vétéran ou handicap.