WE HELP THE WORLD RUN BETTER

At SAP, we enable you to bring out your best. Our company culture is focused on collaboration and a shared passion to help the world run better. How? We focus every day on building the foundation for tomorrow and creating a workplace that embraces differences, values flexibility, and is aligned to our purpose-driven and future-focused work. We offer a highly collaborative, caring team environment with a strong focus on learning and development, recognition for your individual contributions, and a variety of benefit options for you to choose from.

COMPANY DESCRIPTION

SAP started in 1972 as a team of five colleagues with a desire to do something new. Together, they changed enterprise software and reinvented how business was done. Today, as a market leader in enterprise application software, we remain true to our roots. That’s why we engineer solutions to fuel innovation, foster equality and spread opportunity for our employees and customers across borders and cultures.
SAP recently decided to combine and harmonize all SAP Sovereign Cloud offerings, establishing an end-to-end process for the Public Sector and regulated industries. The newly created Global Sovereign Cloud Delivery & Operations business unit is part of SAP Product Engineering with responsibility across the relevant Sovereign Cloud portfolio of SAP. Global Sovereign Cloud Delivery & Operations is collaborating closely with all Board areas to establish a harmonized, scalable, and consistent offering with transparent and standardized deliverables.

WORK EXPERIENCE

• 7+ years of experience in information security
• Very good understanding of infrastructure and security related topics
• Experience with CI/CD pipelines and DevOps practices
• Very good understanding of SAP Product Standards and SDOL is a plus
• Balanced expertise in both full stack application development and infrastructure development
• Thorough understanding of infrastructure firewalls, load balancers, storage, monitoring, security, IAM etc. and have experience with orchestration to develop a cloud solution
• Working knowledge of Log Correlation, Vulnerability Management, Web Application Testing concepts is a plus
• Exposure to either NIST, ISO, or other compliance frameworks
• Experience with securing products on AWS, Azure, and/or GCP is a plus
  

  SAPCloudreq, #ICC24 #SAPCareersSovereignCloud

We are looking for a Product Security Expert (f/m/d) within the Security Engineering group in the Technology & Engineering unit of the newly formed Sovereign Cloud Delivery & Operations team as part of the Customer Service & Delivery board area.
In this role you will analyze security requirements, translate requirements into security design, and execute their implementation. You will implement/review the technical security measures necessary to support policies and prove compliance. You will implement and maintain security solutions to protect data in adherence to the data protection and privacy strategy.
You will conduct security assessments of SAP products as part of their adoption into the Sovereign Cloud portfolio. You will work closely together with the SAP product teams as well as Sovereign Cloud engineering to communicate assessment results with the relevant stakeholders and follow-up on remediation activities with the overall goal of pushing security requirements left.
You will develop, implement, integrate, and operate tools to support detection, prevention, analysis, and resolution of security threats
You will inspire innovation and drive execution of disciplined and standardized security processes and tools addressing mission-critical capability gaps and opportunities for maximized efficiency. You will help identify trade-offs in security deployment plans and any key day-to-day operational decisions impacting infrastructure investments significantly.
You need to ensure the team’s knowledge base is kept consistently up-to-date with native hyperscaler capabilities and modern infrastructure management tools. Starting from this status quo, you will design security concepts for our infrastructure management on the global scale.
This will involve significant coordination with the global Sovereign Cloud operations teams and our hyperscaler provider partners.