Senior Product Security Engineer / DevSecOps

About SAP

SAP is the market leader in enterprise application software — helping companies of all sizes and industries simplify and innovate. From the back office to the boardroom, on-premise to cloud, SAP empowers organizations to operate profitably, adapt continuously, and grow sustainably.

Meet Your Team

The SAP HANA Cloud organization is a global team dedicated to delivering enterprise-grade data management solutions at scale. You will join a team that protects one of SAP's most strategic cloud platforms — work that directly contributes to the security, compliance, and reliability of services used by customers running business-critical workloads worldwide.

Our services are built on cutting-edge technologies — including Kubernetes and containerization — and run at large scale across all major cloud providers. With a strong focus on reusability across the HANA & Analytics portfolio, we deliver an enterprise-ready, unified data and semantics layer that enables customers to build mission-critical applications.

What You Will Do

• Design, develop, and operate scalable microservices that deliver critical security functionalities for SAP HANA Cloud, following secure-by-design and DevSecOps principles
• Embed security into CI/CD pipelines — integrating automated scanning, vulnerability management, policy enforcement, and compliance checks as first-class pipeline stages
• Translate regulatory and internal security requirements into automated, code-driven controls that create a trusted environment for customers
• Design and maintain secure access control mechanisms — including RBAC models and authentication/authorization flows — as integral parts of the platform's security architecture
• Collaborate with cross-functional engineering teams to shift security left, aligning security goals with development priorities from design through deployment
• Implement and maintain infrastructure-as-code and policy-as-code practices to ensure consistent, auditable, and repeatable security configurations
• Provide ongoing observability, support, and continuous improvement for deployed security services to ensure high availability, performance, and resilience

What You Bring

We know great candidates may not meet every qualification listed. If you are enthusiastic about cloud security and believe you can contribute to this role, we encourage you to apply.

Core experience:

• Developing and operating microservices in cloud-native environments using DevSecOps practices
• Working with CI/CD pipelines and security automation tooling (e.g. Azure DevOps, Jenkins, or equivalent)
• Kubernetes — including security hardening (pod security policies, network policies, secrets management) and public cloud platforms (AWS, Azure, GCP)

Security expertise:

• User access and identity management — RBAC design, least-privilege execution, and secure authentication mechanisms (OAuth 2.0, OIDC, SAML)
• Encryption, secrets management, and key rotation strategies (e.g. HashiCorp Vault, KMS)

Engineering skills:

• Scripting (e.g. Python and/or GO) to automate security operations, remediation workflows, and compliance reporting
• Log aggregation, observability, and visualization platforms (e.g. Grafana, Loki) for security monitoring and compliance evidence

Ways of working:

• A collaborative mindset and the ability to embed secure practices across engineering teams

What We Offer

• Hands-on experience with the SAP HANA Cloud technology stack and deep expertise in cloud-native security and compliance
• A seat at the table for cross-project initiatives and key architectural decisions in a dynamic, future-oriented environment
• Opportunities to grow into technical leadership and drive cross-organizational security initiatives
• Continuous learning through mentoring, training, and real-world experience with modern cloud technologies

About SAP
With a global network of customers, partners, employees, and thought leaders, SAP helps the world run better and improves people’s lives.
As a leader in enterprise applications and business AI, SAP stands at the nexus of business and technology. For over 50 years, organizations have trusted SAP to bring out their best by uniting business-critical operations spanning finance, procurement, HR, supply chain, and customer experience.
 
We win with inclusion
 
SAP’s culture of inclusion, focus on health and well-being, and flexible working models help ensure that everyone, regardless of background, feels included and can run at their best. At SAP, we believe we are made stronger by the unique capabilities and qualities that each person brings to our company, and we invest in our employees to inspire confidence and help everyone realize their full potential. We ultimately believe in unleashing all talent and creating a better world.
 
SAP is committed to the values of Equal Employment Opportunity and provides accessibility accommodations to applicants with physical and/or mental disabilities. If you are interested in applying for employment with SAP and are in need of accommodation or special assistance to navigate our website or complete your application, please send an email with your request to the Recruiting Operations Team: [email protected].
 
For SAP employees: Only permanent roles are eligible for the SAP Employee Referral Program, according to the eligibility rules set in the SAP Referral Policy. Specific conditions may apply for roles in Vocational Training.
 
Qualified applicants will receive consideration for employment without regard to age, race, religion, national origin, ethnicity, gender (including pregnancy and childbirth), sexual orientation, gender identity or expression, protected veteran status, or disability, in compliance with applicable federal, state, and local legal requirements.
 
Successful candidates might be required to undergo a background verification with an external vendor.
 
AI Usage in the Recruitment Process
 
For information on the responsible use of AI in our recruitment process, please refer to our Guidelines for Ethical Usage of AI in the Recruiting Process.
 
Please note that any violation of these guidelines may result in disqualification from the hiring process.