Product Security (Senior) Specialist (f/m/d) - Garden Linux

at  SAP

WE HELP THE WORLD RUN BETTER

Our company culture is focused on helping our employees enable innovation by building breakthroughs together. How? We focus every day on building the foundation for tomorrow and creating a workplace that embraces differences, values flexibility, and is aligned to our purpose-driven and future-focused work. We offer a highly collaborative, caring team environment with a strong focus on learning and development, recognition for your individual contributions, and a variety of benefit options for you to choose from. Apply now!

SAP aims to develop an Open Reference Architecture (ORA) for a secure and sustainable cloud edge infrastructure that includes intelligent optimization methods for data transparency and security. This reference infrastructure, aspired by the EU IPCEI-CIS (Important Project of Common European Interest – Next Generation Cloud Infrastructure and Services) program, shall be the basis for future software development and a prerequisite for a pan-European cloud edge infrastructure.
SAP will be working on the publicly funded project with both experienced employees from its existing workforce but also new hires. Therefore, we are looking for suitable candidates. If you are interested in Cloud Operating System development and operation, the usage and further development of Open-Source solutions and standards, interoperability, efficiency, and sustainability you should consider applying.
As a Product Security (Senior) Specialist (f/m/d) for Garden Linux, you will be working in a highly skilled team and build and maintain an innovative Linux distribution dedicated and optimized for containerized and virtualized workloads with a strong focus on security. The activities range from analysing and implementing security information from public communities or databases (like NIST) to participating in risk and threat analysis meetings for Garden Linux and its stakeholders. You will be closely working together with the Gardener (https://gardener.cloud), IronCore (https://github.com/ironcore-dev), as well as application teams at SAP to optimize Garden Linux.
We emphasize engineering excellence, foster autonomous teamwork and a trust-based working model. Collaboration with other teams and Open-Source communities in an international environment will be a regular part of your work. If you are an experienced Security specialist and interested in cutting-edge technology like Kubernetes and building-up an active Open-Source community, you will find an inspiring and professional environment for your learning and growth.

In more detail, you will be

• Responsible for addressing security issues in Garden Linux
• Participating in threat modelling
• Defendind Garden Linux security decisions in audits
• Developing new features to enhance Garden Linux security capabilities
• Dealing with latest standards and requirements in TPM, Remote Attestation, Secure Boot, KMS and more