Cloud Security Orchestration and Automation Expert

**We help the world run better**

At SAP, we enable you to bring out your best. Our company culture is focused on collaboration and a shared passion to help the world run better. How? We focus every day on building the foundation for tomorrow and creating a workplace that embraces differences, values flexibility, and is aligned to our purpose-driven and future-focused work. We offer a highly collaborative, caring team environment with a strong focus on learning and development, recognition for your individual contributions, and a variety of benefit options for you to choose from.

**Summary**

The GCS SRRC Hyperscaler Security Engineering team works on automating and administering Hyperscaler (IBM Cloud, AWS, Azure, GCP and AliCloud) security solutions. We are a geographically dispersed team who provides security configuration compliance scanning across all SAP public cloud environments. Our solutions allow SAP lines of business to increase their security by giving them critical security controls based on SGS policy. We utilize a combination of cloud native security tooling, automation, and processes to identify configuration gaps and provide actionable steps to remediate them.

**What you'll do**
- Develop and Implement Security Solutions: Design and implement robust security controls and strategies across cloud platforms (AWS, Azure, GCP, or Ali) to protect data and ensure regulatory compliance.
- Automate Security Operations: Develop and manage Security Orchestration, Automation, and Response (SOAR) workflows to automate incident response and improve operational efficiency.
- Integrate and Optimize Security Tools: Integrate CNAPP, CWP, and CSPM platforms with SOAR solutions to streamline security operations and enhance visibility across the cloud environment.
- Build Security Orchestration Platforms: Lead the development of comprehensive security orchestration platforms that automate data collection, threat detection, and incident remediation.
- Create APIs and Data Pipelines: Design and implement APIs and data pipelines to ensure smooth communication between security tools and the orchestration platform, enabling real-time data exchange.
- Threat Detection and Monitoring: Develop advanced real-time monitoring systems to correlate and analyze security data from various sources, proactively identifying and responding to threats.
- Collaborate Across Teams: Work with global teams to gather requirements, align security strategies with business objectives, and ensure seamless integration of security solutions across different environments.
- Conduct Security Assessments: Perform regular security assessments and audits to identify vulnerabilities, evaluate security posture, and implement corrective actions.
- Mentor and Train Team Members: Provide guidance and mentorship to junior security engineers, fostering a culture of continuous learning and security best practices within the organization.
- Stay Updated on Emerging Threats: Continuously research and stay informed about the latest security threats, trends, and technologies to enhance the organization's overall security posture and implement proactive measures.

**What you bring**
- SecDevOps Expertise: Mastery in at least one area such as Security as Code, CI/CD, Infrastructure as Code, Secure Coding Practices, Security Governance, Orchestration, or modern cloud services.
- Cloud Security: Demonstrated expertise in developing security controls on at least one major public cloud platform (AWS, Azure, GCP, Ali).
- SOAR and Cloud Security Tools:

- Experience in implementing and managing SOAR platforms to automate and improve incident response processes using Cloud Security Tools.
- Knowledge of CNAPP (Cloud-Native Application Protection Platform), CWP (Cloud Workload Protection), and CSPM (Cloud Security Posture Management) platforms to enhance automated security operations and streamline compliance efforts.
- Ability to design automated SOAR workflows that integrate with CNAPP, CWP, and CSPM to collect and analyze security data, identify threats, and automate remediation.
- Security Orchestration Platform Development:

- Proven experience in designing and developing a comprehensive security orchestration platform for cloud environments.
- Ability to create automated workflows that collect and integrate data from various security tools and systems, such as threat intelligence feeds, SIEMs (Security Information and Event Management), and vulnerability management systems.
- Expertise in building robust APIs and data pipelines to ensure seamless communication between different security components.
- Experience in aggregating and normalizing security data to provide a centralized view of security events, vulnerabilities, and compliance status.
- Capability to automate incident response actions and remediation processes using custom scripts or pre-built playbooks.
- Strong understanding of real-time monitoring and the ability to correlate security data from mul