Senior Engineer Vulnerability Management, ITC
INDIA TECHNOLOGY CENTER
Nike
Inspiration und Support für alle Athlet:innen mit innovativen Produkten, Experiences und Services.WHO ARE WE LOOKING FOR
We’re looking for a Senior Engineer Vulnerability Management to be focused on the automation and integration of various security vulnerability assessment tools to drive accountability & visibility of Nike's high-risk findings. This role will work with multiple data sources, including all vulnerability data and other enterprise data, for contextual enrichment to drive actional output and automated vulnerability management lifecycle. In addition, this individual will work with technical and business teams to understand customer use cases for remediation of the vulnerabilities and provide solutions to create self-service visibility into security findings for mitigation and automated reporting. You will also improve Nike's security posture by advocating for security best practices and implementation. Ours is a fast-paced, forward-thinking team constantly innovating and passionate about data and risk reduction.
WHAT WILL YOU WORK ON
Developing automation & complex orchestration to scale out the vulnerability tools, output of vulnerability data and correlated (enrichment) data across the organization
Assist with maintaining pipeline integration of security tools into various development SDLCs
Educate Engineers, developers, and product teams on the importance of vulnerability management, effectively utilize the tools and remediate findings identified in an automated fashion
Continually evaluate the current state of the program; work with the team constantly find ways to automate and develop future roadmap
Communicate complex technical issues simply to different audiences
Ability to quickly learn new Information Security concepts and adapt to a fast-paced, ever-changing organization
WHO WILL YOU WORK WITH
This role is part of the Attack Surface Management team within Corporate Information Security (CIS) and reports to the local Director for Cyber Defense. You will work with teams within CIS, including the Nike Cyber Defense Center & Incident Response (NCDC/IR) and CIS Cyber Defense Management team.
WHAT YOU BRING
BS or MS degree preferred in computer science, information assurance
Expertise in interpreted languages (Python is a must) and high-level languages (Java script, .Net, PowerShell) with full-stack development experience
Hands on experience with ETL tools (i.e. Apache Nifi, MS-SSIS, jasper) and concepts
Software development background and strong knowledge of software development lifecycles
Previous experience deploying and maintaining configuration as code systems, services, containers and applications in AWS, Azure and/or GCP
Hands on experience with Vulnerability management tools such as Tenable, Rapid7, or Qualys, Twistlock
Ability to develop and communicate recommendations to management
Ability to translate technical security vulnerabilities into business risk
Strong problem-solving and conceptual thinking abilities
Strong ability to reverse engineer tools, exploits and open-source applications and ability to develop them
Experience looking for application security vulnerabilities such as Cross Site Scripting, SQL Injection, Cookie Manipulation, Buffer Overflows, etc.
In-depth familiarity with Windows and Unix Operating Systems
* Salary range is an estimate based on our InfoSec / Cybersecurity Salary Index 💰
Tags: Application security Automation AWS Azure Computer Science Cyber defense Exploits Full stack GCP Incident response Java PowerShell Python Qualys Scripting SQL SQL injection Twistlock UNIX Vulnerabilities Vulnerability management Windows
More jobs like this
Explore more career opportunities
Find even more open roles below ordered by popularity of job title or skills/products/technologies used.