AppSec Jobs

Nike

Senior Security Engineer, ITC

IndiaWebsite
Apply on Nike's site →

At a Glance

2+ years experienceCode ReviewCISSPCS/Security DegreeAdvanced Degree

About This Role


WHO WE ARE LOOKING FOR

As our Senior SAP Application Security Engineer in NIKE ITC, your role on the team will be to lead the execution of a compelling and competitive application security strategy and drive engineering best practice tasks. This is a critical role within the organization that will enable tools and processes in the delivery of technology that will transform our application security solutions. 

NIKE does more than outfit the world's best athletes. We are a place to explore potential, obliterate boundaries, and push out the edges of what can be. We are looking for people who can grow, think, dream and create. We thrive in a culture that embraces diversity and rewards imagination. We seek achievers, leaders, and visionaries. At NIKE, it's about bringing what you have to a challenging and constantly evolving game.

WHAT YOU WILL WORK ON

This role will be performing these key tasks:

  • Creation, adoption, and execution of a strategic plan to align SAP Security in accordance with Industry best practices and SOX Compliance.
  • Manage master service partner team to successfuly execute large initiatives in addition to smaller ongoing support projects and to help implement and operate security controls.
  • Vendor Relationship - Building strong relationships with a variety of third party providers to deliver the tools and skills needed to fulfill the application security strategy
  • Coordinate and lead system redesign and upgrade/patching activities for the application security team
  • Develop and operate application security services relevant for applications

WHO YOU WILL WORK WITH

You will work in close partnership with the Master Service Partner as well as other leaders throughout NIKE's technical and business community to ensure NIKE Technology embraces industry-leading innovations, trends, and transformations and accelerates and supports business strategies and priorities for NIKE’s rapidly growing business. This position will require that you bring a strong background in in the application security field and SAP Technologies, combined with the facilitation and influencing skills needed to shape NIKE's future direction. This is a position that will allow you to exercise your leadership, interpersonal, and technical skills.  It will be rewarding yet challenging at the same time.  This is not "just another job".

WHAT YOU BRING

  • Bachelor's in Computer Science or a related field
  • 6+ years’ experience in SAP Security projects with at least 2 full cycle implementations
  • 2+ years of experience with SAP GRC Access Control 10.x/12.0 implementation and configuration, designing segregation of duties (SOD) risks, and remediating identified violations
  • 2+ years experience with implementation and support of IT controls on SAP GRC reporting and user access environments.
  • Experience to ITGC audit and compliance cycles and requirements.
  • Demonstrate strong understanding of large-scale information technology systems; Experience with delivering enterprise quality application security solutions.  Demonstrated blend of strategic, execution, and operational success of leading application security in a world class, global and high transaction environment. 
  • Familiarity with the following concepts: Application logging/security reporting, Application vulnerability testing, code reviews
  • Strong interpersonal communications skills with a proven track record of collaboration and influence across a diverse audience of business and technical team members.

Preferred

  • Experience with implementing SAP GRC Process Controls
  • CISSP certification
  • SAP Security Certification

Source: Nike careers · View original posting


About Nike

Nike, Inc. is a prominent global sportswear and athletic footwear company based in Beaverton, Oregon. Founded in 1964 by Phil Knight and Bill Bowerman, it originally operated as Blue Ribbon Sports before officially becoming Nike, Inc. in 1971. The company started as a distributor for Onitsuka Tiger but soon began designing and manufacturing its own athletic shoes and apparel. Nike offers a diverse range of products, including sports shoes, sportswear, fitness trackers, and sports accessories. Its footwear caters to various sports such as running, basketball, football, tennis, and soccer. The company also provides athletic apparel for men, women, and children, featuring a plus-size line introduced in 2017. Nike owns well-known subsidiaries like Air Jordan and Converse, enhancing its presence in both sports and lifestyle markets. The brand is recognized for its innovative marketing strategies and iconic branding, including the "Swoosh"logo and the slogan "Just Do It."

Industry

retail

Employees

80,000

4679 engineers

Revenue

$46B

Website

Visit →

Security at Nike

Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.

3 Intel Signals

Security Philosophy

“Stated AppSec Mission: "You'll be a key member of the SecureCode team within the Application Security Consulting group."– Nike Careers (Job ID R-71212), Job Posting, , Developer Enablement vs. Gatekeeping: "Working closely with Nike Business and Technical teams to produce secure solutions at the speed of business."– Nike Careers (Job ID R-74142), Job Posting, , Risk Philosophy: "The focus areas for this role are Risk Reduction, Information Security by Design."– Nike Careers (Job ID R-74142), Job Posting, , Stated Pain Points or Goals (Verbatim): "Design and implement cybersecurity metrics (KPIs/KRIs) to measure control effectiveness”

Security Team

Key Initiatives

  • ""Shift Left"in Practice (pre-commit / CI/CD / developer tools): "Collaborate with global engineering and DevOps teams to integrate security tooling into CI/CD pipelines.
  • Secure SDLC Artifacts: "Knowledge of threat modeling and secure design review methodologies."– Nike Careers (Job ID R-71212), Job Posting, , "Design and implement cybersecurity metrics (KPIs/KRIs) to measure control effectiveness."(No public blog posts, press releases, or talks found in sampled searches explicitly announcing new AppSec programs or tool rollouts within the last six months.) Gaps & Contradictions: - No public statements found describing a Security Champions program, a formal vulnerability-triage SLA, or named AppSec process owners in Nike public materials sampled.

Preparing for an AppSec interview?

Get the weekly briefing 2,000+ security pros trust.

Interested in this role?

Apply on Nike's site