Lead Cyber Defense Engineer, ITC

This role sits within the Cyber Data & Engineering (CDE) team at the India Technology Centre (ITC) and reports to the Director of Cyber Data & Engineering within the ITC Corporate Information Security team. It is accountable for building, operating and continuously improving security analytics pipelines and data services on designated platforms, using cloud security principles, Python, APIs and modern data lakehouse technologies. The role partners closely with US-based platform architects, Detection Engineering, Response Engineering and data science/ML leaders in a follow-the-sun delivery model, coordinating with both technical and non-technical teams.

• Build, deploy and operate security analytics capabilities on AWS and Databricks, aligned to team architecture and runbooks.
• Build and maintain medallion lakehouse pipelines (bronze/silver/gold) from security telemetry with schema governance, data quality checks and cost-aware compute.
• Develop and support production Python services (e.g. Lambda, containerised workloads) for ingestion, enrichment and integration with SOAR, analytics consumers and internal APIs.
• Utilise Databricks tools such as Unity Catalog, Delta Lake and jobs/workflows for centralised data pipelining, integration with AI/ML modules, and in-time security alerting and enrichment.
• Operate and improve pipeline reliability, monitoring, alerting, troubleshooting, runbooks and on-call participation as defined by the team.
• Deliver datasets, entity models and integration points that enable detection and hunting at scale, while partner teams own detection rule development.
• Complete process and workflow orchestration to streamline team efforts and support follow-the-sun delivery with global partners.
• Apply Secure DevOps principles and CI/CD pipelines using Nike standard practices, including infrastructure-as-code (Terraform or CDK), and leverage cloud technologies and serverless architectures while evaluating adherence to Nike platform expectations.
• Define solutions, estimate effort and risk, evaluate technical feasibility, and maintain accountability for leading practices in software development tools, software quality, pipeline operations and automation development.
• Work with, guide and mentor team members technically, provide feedback on code improvements, maintain code documentation and high-level diagrams, complete knowledge-sharing sessions, and lead scrum routines as the ITC lead for sprint ceremonies while advancing JIRA knowledge.

• Minimum of 10 years of experience in software development, including 2+ years in a lead or senior technical role.
• Direct experience and comfort with Python software development, testing and tooling.
• Direct experience building and operating data lakehouse pipelines.
• Hands-on Databricks experience, including Unity Catalog, Delta Lake, jobs/workflows and performance tuning.
• Direct experience delivering and managing solutions on AWS, including Lambda, S3, IAM, event-driven patterns and Terraform or CDK.
• Experience with medallion architecture, schema governance, data quality, idempotent ingestion, backfill/replay, and batch or streaming pipelines at scale.
• Experience operating production data platforms and pipelines, including monitoring, troubleshooting, runbooks and shared on-call support.
• Experience and comfort with REST APIs.
• Direct experience building CI/CD pipelines with toolsets such as Jenkins, CircleCI or Artifactory.
• Ability to elicit requirements successfully from appropriate business partners and stakeholders, including functional, performance, technical and compliance requirements.
• Self-directed and comfortable working in a fast-paced, results-oriented and often ambiguous environment.
• Experience managing, guiding, mentoring and providing feedback to the team on day-to-day work.
• Experience working with global teams and stakeholders on projects and tasks.
• Evidence of taking pride in work, with focus, high attention to detail and build quality.
• Critical thinking and proactive problem solving.

• Experience in cyber security or security analytics environments.
• Experience with additional cloud providers beyond AWS.
• Experience developing REST APIs and integrating SOAR or security tooling.
• Experience with Databricks depth, including Delta Live Tables, streaming ingestion and Unity Catalog grants/lineage.
• Experience with AWS data patterns such as EventBridge, KMS and Secrets Manager.
• Experience implementing GenAI and ML for cybersecurity use cases on Databricks.
• Familiarity with open security data models, such as OCSF, and MITRE ATT&CK-aligned analytics.
• Certification such as Databricks, AWS, CISSP or GIAC.

• India Technology Centre (ITC)
• Follow-the-sun delivery model with global partners

• Generous total rewards package.
• Casual work environment.
• Diverse and inclusive culture.
• Electric atmosphere for professional development.