Requisition ID: 379696
Work Area: Software-Development Operations
Expected Travel: 0%
Career Status: Professional
Employment Type: Regular Full Time
Career Level: T4PF
Additional Locations:

Original Posting Date: Augut 30, 2023

Location: Newport Beach, CA 

Purpose and Objective:  
SAP Labs, LLC seeks a Product Security Expert at our Newport Beach, CA location to lead the development and maintenance of end-to-end security architecture for aligned SAP products, applications, or services.

Expectations and Tasks: 
Reduce business risk associated with threats and vulnerabilities in assigned products, applications, components, or other specialized programs addressing product security throughout the development cycle.  Maintain awareness of industry security architecture best practices, and research and test their applicability to aligned products, applications, or services. Work with product development, product security, and other cyber security professionals to design and implement secure architectures. Collaborate with business and technology stakeholders to define and enhance security solutions based on changing threat and regulatory landscape. Leverage SAP’s products, technology, and infrastructure to develop comprehensive and holistic security architecture solutions. Identify product security risks and propose architectural countermeasures. Support Product Teams in conducting threat modeling, reviewing security scan results, and performing deep-dive design reviews. Develop and maintain architecture blueprints, product interoperability, future state architecture, and multiyear execution roadmap. Provide mentoring and training to junior staff to enhance skillsets. 

Education and Qualifications/Skills and Competencies: 
Bachelor's degree or foreign equivalent in Computer Science, Engineering, Mathematics or a related field and 7 years of experience in the job offered or a related occupation. Also, employer will accept a three-or four-year Bachelor’s degree or a combination of education and experience as equivalent to a Bachelor’s degree. Employer will accept pre-bachelor's experience. The company will also accept a Master’s degree or foreign equivalent in Computer Science, Engineering, Mathematics and 5 years of experience in the job offered or a related occupation. 

Work Experience: 
Experience must involve 5 years in the following:
•    Assessment and management of security vulnerabilities, including SAST/DAST scans, penetration testing, security response, OWASP, and CVSS;
•    Strategic threat modeling methodology including STRIDE; 
•    Secure software development lifecycle;
•    SOC reports, ISO certifications, and Information Security Management System (ISMS);
•    Product Security in coding and architecture, including SAST and OWASP;
•    Cross-Product Security including NIST, CERT.cc, and FIRST; and
•    Cloud Security including SAP Cloud Platform, AWS Security, and Zero Trust Framework.

Travel: N/A. Telecommuting permitted.

This position is eligible for the Employee Referral Program subject to the eligibility criteria outlined in the SAP Internal Employee Referral Policy.

Internal use only: reference code lhrs4262
SAP:SAIL

Compensation Range Transparency: The annual base salary range for this position is $149,344 - $210,084. SAP believes the value of pay transparency contributes towards an honest and supportive culture and is a significant step toward demonstrating SAP’s commitment to pay equity. SAP provides the annualized compensation range inclusive of base salary and variable incentive target for the career level applicable to the posted role. The targeted combined range for this position is $153,800- $261,500. The actual amount to be offered to the successful candidate will be within that range, dependent upon the key aspects of each case which may include education, skills, experience, scope of the role, location, etc. as determined through the selection process. Any SAP variable incentive includes a targeted dollar amount and any actual payout amount is dependent on company and personal performance.  Please reference this link for a summary of SAP benefits and eligibility requirements: SAP North America Benefits. 

 SAP'S DIVERSITY COMMITMENT
To harness the power of innovation, SAP invests in the development of its diverse employees. We aspire to leverage the qualities and appreciate the unique competencies that each person brings to the company.
SAP is committed to the principles of Equal Employment Opportunity and to providing reasonable accommodations to applicants with physical and/or mental disabilities. If you are interested in applying for employment with SAP and are in need of accommodation or special assistance to navigate our website or to complete your application, please send an e-mail with your request to Recruiting Operations Team (Americas: Careers.NorthAmerica@sap.com or Careers.LatinAmerica@sap.com, APJ: Careers.APJ@sap.com, EMEA: Careers@sap.com). Requests for reasonable accommodation will be considered on a case-by-case basis.

EOE AA M/F/Vet/Disability:
Qualified applicants will receive consideration for employment without regard to their age, race, religion, national origin, gender, sexual orientation, gender identity, protected veteran status or disability.
Additional Locations:  

Nearest Major Market: Orange County
Nearest Secondary Market: Los Angeles
Job Segment: Testing, Cloud, Computer Science, ERP, Product Development, Technology, Research