Security Architect

**We help the world run better**

**Tech Lead
- Signavio Platform Cloud Infrastructure**

**What you'll do**
- Pushing **DevSecOps** - improving Signavio security with a “shift left” approach
- Help implementing and rolling out security and compliance guardrails using various policy engines
- Conducting threat modelling/pre-mortem exercises and periodic security reviews. Drive and proactively follow up security related events
- Identify and fix security vulnerabilities in our Cloud infrastructure. Perform on-going internal security testing and security focused code reviews to improve Cloud security
- Automate vulnerability management. Advocate for improvements to Cloud security, quality, and performance
- Support implementing asset management requirements. Support the organisation in performing ISO 27001 or SOC2 audits
- Educate and enable staff members on secure coding techniques through code reviews, training and raising awareness
- Carry out research and prototyping on current and emerging technologies and issues to ensure engineering excellence within your team. Align and collaborate with security engineers from other engineering departments

**What you bring**
- Engineering graduate with **10+** Industry relevant experience in **DevOps** and knowledge in **Security Domain.**:

- ** Expert** knowledge of typical **security vulnerabilities in the Cloud** and how to prevent these. Ideally certified “**AWS Security Specialty**” or similar
- ** Expert** in **coding** skills to implement policies in **policy engines** like **Kyverno, AWS Config, Checkov**. **Expert** in **coding** skills in **AWS CDK (TypeScript) and Terraform.**:

- ** Depth** Knowledge of **AWS, Kubernetes, Helm, Splunk SIEM, AWS GuardDuty, AWS Security Hub.**:

- Comfortable working with both **modern code and legacy code** and willing to **refactor legacy code.**:

- A passion for coaching and mentoring your less experienced colleagues by drawing upon your experience, skills, and knowledge to ‘give back’ to others
- Ability to lead through, connect and create progress when things aren’t clear, or the way forward is not yet well-defined in all aspects of security research and development
- A willingness to contribute on our journey from our start-up heritage to our SAP Signavio future - which sometimes means having to reconcile the larger corporate picture or processes with our own desire for speed and experimentation (we know this isn’t easy)

**Meet Your team**

Building on the intelligent enterprise strategy, **SAP Signavio** set out to support and accompany SAP customers in navigating through their **digital transformation** by helping them understand and improve their business processes. The platform group is one of five groups in the engineering department of SAP Signavio, and our Cloud OS teams are responsible for cloud and database infrastructure, shared infrastructure services, and Security Operations, with a goal of providing an effective Internal Developer Platform.

SAPSignavio #signavio #sapvacantcareers #sapvacantsaplabscareers #sapvacantmayercareers

**Do I need to meet all the requirements to apply?**:
**We build breakthroughs together**

**We win with inclusion**

SAP’s culture of inclusion, focus on health and well-being, and flexible working models help ensure that everyone - regardless of background - feels included and can run at their best. At SAP, we believe we are made stronger by the unique capabilities and qualities that each person brings to our company, and we invest in our employees to inspire confidence and help everyone realize their full potential. We ultimately believe in unleashing all talent and creating a better and more equitable world.

**EOE AA M/F/Vet/Disability**:
Qualified applicants will receive consideration for employment without regard to their age, race, religion, national origin, ethnicity, age, gender (including pregnancy, childbirth, et al), sexual orientation, gender identity or expression, protected veteran status, or disability.

Requisition ID: 369269 | Work Area: Software-Design and Development | Expected Travel: 0 - 10% | Career Status: Professional | Employment Type: Regular Full Time | Additional Locations: #LI-Hybrid.