WE HELP THE WORLD RUN BETTER

At SAP, we keep it simple: you bring your best to us, and we’ll bring out the best in you. We’re builders touching over 20 industries and 80% of global commerce, and we need your unique talents to help shape what’s next. The work is challenging – but it matters. You’ll find a place where you can be yourself, prioritize your wellbeing, and truly belong. What’s in it for you? Constant learning, skill growth, great benefits, and a team that wants you to grow and succeed.

ABOUT US:

The Data Platform Engineering Team is responsible for developing the SIEM platform used across partner organizations for Incident Response, Cyber Threat Intelligence, and Vulnerability Management within SAP’s lines-of-business. Our platform is the central investigative tool for the Cyber Defense & Design team, enhancing the ability to analyze suspicious activities comprehensively. Furthermore, it supports IT Operations workloads, facilitating proactive monitoring and compliance

KEY QUALIFICATIONS

• Experience: Minimum of 5-7 years in data platform engineering, SIEM management, or a similar field.
• Technical Expertise: Proficiency with data tools like Splunk, Cribl, and ELK; skill in handling standard data formats (JSON, CSV, syslog) and advanced regex/transforms/grok rules.
• Source Control and CI/CD: Strong understanding of GitHub VCS fundamentals and integration with CI/CD tools (e.g., Jenkins, GitHub Actions).
• Network and Linux Skills: Robust network design and troubleshooting capabilities, including DNS. Solid Linux administration skills, including the use of bash, GNU CLI tools, and subsystems like systemd; ability to articulate Linux concepts like filesystems and kernel tuning.
• AWS Management: Experience with AWS services, particularly managing EC2, Route53, Lambda, VPC, and S3

DESIRABLE SKILLS

• Authentication Systems: Familiarity with enterprise authentication/authorization systems and protocols such as SAML, LDAP, and OIDC.
• Configuration Management: Experience with large-scale configuration management tools like Ansible, Chef, Puppet, or alternatives with API-based management.
• Certifications: Splunk Certified Admin, AWS Solution Architect, or similar relevant technical certifications.
• We are seeking a seasoned engineer with a proven track record and the certifications and skills that align with the evolving needs of our data platform infrastructur

As a Senior Data Platform SIEM Engineer, you’ll be instrumental in the advancement, maintenance, and configuration of SAP’s global logging and monitoring ecosystem. Your expertise in Splunk and other SIEM platforms will be essential for sustaining the infrastructure that supports our global Detection Platform. Collaborating with key stakeholders, you will gather detailed requirements, ensure smooth implementations, and act as a point of escalation for system outages. Additionally, you’ll mentor Operations staff and advocate for data hygiene and quality. Your efforts in building new capabilities, optimizing systems, and meticulously documenting processes will ensure sustainability for future team members