Job Description

Purpose

The SAP.iO incubation process is modeled after a venture-capital approach to building startups. Startups built within SAP.iO incubation operate differently from traditional corporate business units in three distinct ways:

General Managers are entrusted with end-to-end responsibilities for their projects – building cross-functional teams to tackle business problems;
Teams manage cash – budgeting is not on an annual basis but provided to prove business value over multi-year horizons;
Boards are created to provide oversight and guidance on a regular basis – providing senior sponsorship and involvement throughout the lifecycle of a project.

Startups that receive funding through SAP.iO incubation must be big enough to move the needle at SAP, attack new market opportunities for the company, and be able to be tested through rapid iteration and constant customer feedback.

We are looking for a passionate and experienced Senior Security Engineer looking for an exciting opportunity to manage the secure development, release, and ongoing operations of multiple products.  This role will be a member of our central Venture Studio team working across our portfolio of incubations. 

Responsibilities

The primary responsibility is to protect customer data for all ventures in SAP.iO:

Ensure that a secure development process is followed 
Manage end-to-end vulnerability lifecycle from discovery to closure
Architect, design, develop and operate secure applications on multiple cloud platforms
Automate monitoring and alerting solutions to detect and report potential issues
Advise and mentor teams on security topics as they arise
Hold threat modeling workshops, including code review, to identify vulnerabilities
Assist the ventures to get through the SAP security validation process
Assist in response to any security incidents

Requirements

Expertise in securing cloud applications on multiple cloud platforms
Expertise in securely configuring common cloud components
Expertise with user management, SSO, SAML to enable ventures products to integrate with other products
Expertise with common security standards and compliance method
Experience with common static code scanning tools (Fortify and Checkmarx are a plus)
Willingness to learn new technologies as they arise; each venture has different needs, and we add 4-6 new incubations each year.
Knowledge of a wide range of best practices in security
Familiarity with SAP Security standards a plus (but not required)
Ability to work on multiple products simultaneously
7+ years of practical experience in software security