At a Glance
About This Role
WHO WE ARE LOOKING FOR
As our Senior SAP Application Security Engineer in NIKE ITC, your role on the team will be to lead the execution of a compelling and competitive application security strategy and drive engineering best practice tasks. This is a critical role within the organization that will enable tools and processes in the delivery of technology that will transform our application security solutions.
NIKE does more than outfit the world's best athletes. We are a place to explore potential, obliterate boundaries, and push out the edges of what can be. We are looking for people who can grow, think, dream and create. We thrive in a culture that embraces diversity and rewards imagination. We seek achievers, leaders, and visionaries. At NIKE, it's about bringing what you have to a challenging and constantly evolving game.
WHAT YOU WILL WORK ON
This role will be performing these key tasks:
- Creation, adoption, and execution of a strategic plan to align SAP Security in accordance with Industry best practices and SOX Compliance.
- Manage master service partner team to successfuly execute large initiatives in addition to smaller ongoing support projects and to help implement and operate security controls.
- Vendor Relationship - Building strong relationships with a variety of third party providers to deliver the tools and skills needed to fulfill the application security strategy
- Coordinate and lead system redesign and upgrade/patching activities for the application security team
- Develop and operate application security services relevant for applications
WHO YOU WILL WORK WITH
You will work in close partnership with the Master Service Partner as well as other leaders throughout NIKE's technical and business community to ensure NIKE Technology embraces industry-leading innovations, trends, and transformations and accelerates and supports business strategies and priorities for NIKE’s rapidly growing business. This position will require that you bring a strong background in in the application security field and SAP Technologies, combined with the facilitation and influencing skills needed to shape NIKE's future direction. This is a position that will allow you to exercise your leadership, interpersonal, and technical skills. It will be rewarding yet challenging at the same time. This is not "just another job".
WHAT YOU BRING
- Bachelor's in Computer Science or a related field
- 6+ years’ experience in SAP Security projects with at least 2 full cycle implementations
- 2+ years of experience with SAP GRC Access Control 10.x/12.0 implementation and configuration, designing segregation of duties (SOD) risks, and remediating identified violations
- 2+ years experience with implementation and support of IT controls on SAP GRC reporting and user access environments.
- Experience to ITGC audit and compliance cycles and requirements.
- Demonstrate strong understanding of large-scale information technology systems; Experience with delivering enterprise quality application security solutions. Demonstrated blend of strategic, execution, and operational success of leading application security in a world class, global and high transaction environment.
- Familiarity with the following concepts: Application logging/security reporting, Application vulnerability testing, code reviews
- Strong interpersonal communications skills with a proven track record of collaboration and influence across a diverse audience of business and technical team members.
Preferred
- Experience with implementing SAP GRC Process Controls
- CISSP certification
- SAP Security Certification
Source: Nike careers · View original posting
About Nike
Nike, Inc. is a prominent global sportswear and athletic footwear company based in Beaverton, Oregon. Founded in 1964 by Phil Knight and Bill Bowerman, it originally operated as Blue Ribbon Sports before officially becoming Nike, Inc. in 1971. The company started as a distributor for Onitsuka Tiger but soon began designing and manufacturing its own athletic shoes and apparel. Nike offers a diverse range of products, including sports shoes, sportswear, fitness trackers, and sports accessories. Its footwear caters to various sports such as running, basketball, football, tennis, and soccer. The company also provides athletic apparel for men, women, and children, featuring a plus-size line introduced in 2017. Nike owns well-known subsidiaries like Air Jordan and Converse, enhancing its presence in both sports and lifestyle markets. The brand is recognized for its innovative marketing strategies and iconic branding, including the "Swoosh"logo and the slogan "Just Do It."
Security at Nike
Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.
Security Philosophy
“Stated AppSec Mission: "You'll be a key member of the SecureCode team within the Application Security Consulting group."– Nike Careers (Job ID R-71212), Job Posting, , Developer Enablement vs. Gatekeeping: "Working closely with Nike Business and Technical teams to produce secure solutions at the speed of business."– Nike Careers (Job ID R-74142), Job Posting, , Risk Philosophy: "The focus areas for this role are Risk Reduction, Information Security by Design."– Nike Careers (Job ID R-74142), Job Posting, , Stated Pain Points or Goals (Verbatim): "Design and implement cybersecurity metrics (KPIs/KRIs) to measure control effectiveness”
Security Team
- Org Structure & Reporting Line: "report directly to the Director of Information Security Engineering Consulting, ITC."– Nike Careers (Job ID R-71212), Job Posting, , "reporting to the Director of Greater China Corporate Information Security (CIS)."– Nike Careers (Job ID R-74142), Job Posting, , Key Public-Facing Leaders (top 1–3 public profiles): - Clint Kaiser, Director - Application Security Consulting
- Team Size Estimate (as_of:): LinkedIn Search Query Used: "site:linkedin.
- Active AppSec Job Postings (as_of:): Count: 4 Cited examples (verbatim role lines): "We're looking for a Senior Application Security Engineer/Analyst"– Nike Careers (Job ID R-71212), Job Posting, , "We're looking for a Lead Information Security Platform Engineer."– Nike Careers (Job ID R-74142), Job Posting, , "We're looking for a Sr. Application Security Consultant."– LiveHire / Nike (Job ID R9KKJ), Job Posting, , (Count based on Nike career pages and partner-hosted job listings found in search.) Common Skill/Tool Patterns (verbatim phrases from postings): "Deep expertise in Application Security Testing (AST) tools, preferably including SAST, DAST, SCA, SBOM analysis, and Mobile AST."– Nike Careers (Job ID R-71212), Job Posting, , "Strong experience integrating security into CI/CD pipelines using tools like GitHub Actions and Jenkins.
Key Initiatives
- ""Shift Left"in Practice (pre-commit / CI/CD / developer tools): "Collaborate with global engineering and DevOps teams to integrate security tooling into CI/CD pipelines.
- Secure SDLC Artifacts: "Knowledge of threat modeling and secure design review methodologies."– Nike Careers (Job ID R-71212), Job Posting, , "Design and implement cybersecurity metrics (KPIs/KRIs) to measure control effectiveness."(No public blog posts, press releases, or talks found in sampled searches explicitly announcing new AppSec programs or tool rollouts within the last six months.) Gaps & Contradictions: - No public statements found describing a Security Champions program, a formal vulnerability-triage SLA, or named AppSec process owners in Nike public materials sampled.
Preparing for an AppSec interview?
Get the weekly briefing 2,000+ security pros trust.
Interested in this role?
Apply on Nike's site