Product Security Specialist
Job Location:
Yearly Salary:
Posted:
Application Deadline:
Vacancies:
Job Summary
We help the world run better
At SAP we keep it simple: you bring your best to us and well bring out the best in you. Were builders touching over 20 industries and 80% of global commerce and we need your unique talents to help shape whats next. The work is challenging but it matters. Youll find a place where you can be yourself prioritize your wellbeing and truly belong. Whats in it for you Constant learning skill growth great benefits and a team that wants you to grow and succeed.
SAP Product Security Response Team (PSRT) manages coordinated disclosure of vulnerabilities on all SAP products and cloud solutions. As part of SAP Product Security PSRT is a global organization with responsibility in SAP product security response function. Our mission is to safeguard SAPs products customers and development ecosystem by driving a unified transparent and proactive product security issue management. We enable trust by managing coordinated (responsible) disclosure coordinating customer notifications on product security breaches and product security vulnerability management. We engage with customers researchers and global CERT bodies to strengthening our products through expert triage remediation and collaboration with engineering teams. Through vigilant oversight of web assets supplychain risks regulatory impact and development ecosystem security we reduce exposure accelerate secure fixes and uphold the integrity and resilience of SAPs global security posture.
SAP PSRT has regional hubs inGermanyIndia andCanada.
What youll do:
You will be a member of an international team of experts in secure programming who work closely with developers on vulnerabilities and security incidents reported on SAP products.
You are expected to:
Combine your technicalexpertisewith experience in managing complex situations
Apply your cybersecurityexpertiseto a variety of situations related to SAP application and product security
Communicate with security researcherscustomersand SAPs support organizations on confidential and sensitive disclosures
Assess the risk of disclosure andwork with internal stakeholders to mitigate risk to SAP
Guide developmentteams onpossible solutionsto fix security vulnerabilities and manage security incidentswith stakeholders
Bachelors degree in technology Computer Science or Engineering post-graduate degree is an asset
Required skills:
Excellent communication skillsin English(written and verbal)
Superior ability to analyze complex security situationand provide sensible recommendationto a variety of technical/non-technical stakeholders
Ability tostay calmin stressful situation andremain tactical to drive strategic outcome for our organization
Broad understanding of SAP products
Understanding of OWASP Top Ten and common vulnerability types
Understanding how CVSS CVE and CWE work together
Preferred skills:
Understanding of Cyber Security Frameworkand its relation to product security
Understanding of Secure SDLC
Understanding of common security architectures general awareness of compliance framework like CRA FIPS ISO 27001
Certifications like CISSP CSSLP CCSP OSCP CEHor SANS certificationsare assets
What you bring
5-7years of experience in securityin roles like an application security developer
Experience inleading through complex situations inapplicationsecurity
Experience inworking with developersDevOpsor other development-supporting roles
Experience in executive communicationand external/media communicationis preferred
Bring out your best
SAP innovations help more than four hundred thousand customers worldwide work together more efficiently and use business insight more effectively. Originally known for leadership in enterprise resource planning (ERP) software SAP has evolved to become a market leader in end-to-end business application software and related services for database analytics intelligent technologies and experience management. As a cloud company with two hundred million users and more than one hundred thousand employees worldwide we are purpose-driven and future-focused with a highly collaborative team ethic and commitment to personal development. Whether connecting global industries people or platforms we help ensure every challenge gets the solution it deserves. At SAP you can bring out your best.
We win with inclusion
SAPs culture of inclusion focus on health and well-being and flexible working models help ensure that everyone regardless of background feels included and can run at their best. At SAP we believe we are made stronger by the unique capabilities and qualities that each person brings to our company and we invest in our employees to inspire confidence and help everyone realize their full potential. We ultimately believe in unleashing all talent and creating a better world.
SAP is committed to the values of Equal Employment Opportunity and provides accessibility accommodations to applicants with physical and/or mental disabilities. If you are interested in applying for employment with SAP and are in need of accommodation or special assistance to navigate our website or to complete your application please send an e-mail with your request to Recruiting Operations Team:
For SAP employees: Only permanent roles are eligible for the SAP Employee Referral Program according to the eligibility rules set in the SAP Referral Policy. Specific conditions may apply for roles in Vocational Training.
Qualified applicants will receive consideration for employment without regard to their age race religion national origin ethnicity gender (including pregnancy childbirth et al) sexual orientation gender identity or expression protected veteran status or disability in compliance with applicable federal state and local legal requirements.
SAP believes the value of pay transparency contributes towards an honest and supportive culture and is a significant step toward demonstrating SAPs commitment to pay equity. SAP provides the annualized compensation range inclusive of base salary and variable incentive target for the career level applicable to the posted role. The targeted combined range for this position is 77500-166200CAD. The actual amount to be offered to the successful candidate will be within that range dependent upon the key aspects of each case which may include education skills experience scope of the role location etc. as determined through the selection process. Any SAP variable incentive includes a targeted dollar amount and any actual payout amount is dependent on company and personal performance. A summary of benefits and eligibility requirements can be found by clicking this link: .
Due to the nature of the role which involves global interactions with SAP entities as well as with employees and stakeholders in Canada functional proficiency in English is required for positions based in the Quebec.
AI Usage in the Recruitment Process
For information on the responsible use of AI in our recruitment process please refer to our Guidelines for Ethical Usage of AI in the Recruiting Process.
Please note that any violation of these guidelines may result in disqualification from the hiring process.
Requisition ID: 456807 Work Area: Solution and Product Management Expected Travel: 0 - 10% Career Status: Professional Employment Type: Regular Full Time Additional Locations: #LI-Hybrid
Required Experience:
IC
About Company
SAP started in 1972 as a team of five colleagues with a desire to do something new. Together, they changed enterprise software and reinvented how business was done. Today, as a market leader in enterprise application software, we remain true to our roots. That’s why we engineer soluti ... View more
