Product Security Specialist

We help the world run better

At SAP, we keep it simple: you bring your best to us, and we'll bring out the best in you. We're builders touching over 20 industries and 80% of global commerce, and we need your unique talents to help shape what's next. The work is challenging - but it matters. You'll find a place where you can be yourself, prioritize your wellbeing, and truly belong. What's in it for you? Constant learning, skill growth, great benefits, and a team that wants you to grow and succeed.

SAP Product Security Response Team (PSRT) manages coordinated disclosure of vulnerabilities on all SAP products and cloud solutions. As part of SAP Product Security, PSRT is a global organization with responsibility in SAP product security response function. Our mission is to safeguard SAP’s products, customers, and development ecosystem by driving a unified, transparent, and proactive product security issue management. We enable trust by managing coordinated (responsible) disclosure, coordinating customer notifications on product security breaches and product security vulnerability management. We engage with customers, researchers, and global CERT bodies, to strengthening our products through expert triage, remediation, and collaboration with engineering teams. Through vigilant oversight of web assets, supply-chain risks, regulatory impact, and development ecosystem security, we reduce exposure, accelerate secure fixes, and uphold the integrity and resilience of SAP’s global security posture.

SAP PSRT has regional hubs in Germany, India, and Canada.

What you'll do:

You will be a member of an international team of experts in secure programming, who work closely with developers on vulnerabilities and security incidents reported on SAP products.

You are expected to:

• Combine your technical expertise with experience in managing complex situations

• Apply your cybersecurity expertise to a variety of situations related to SAP application and product security

• Communicate with security researchers, customers and SAP’s support organizations on confidential and sensitive disclosures

• Assess the risk of disclosure and work with internal stakeholders to mitigate risk to SAP

• Guide development teams on possible solutions to fix security vulnerabilities and manage security incidents with stakeholders

Bachelor’s degree in technology, Computer Science or Engineering, post-graduate degree is an asset

Required skills:

• Excellent communication skills in English (written and verbal)

• Superior ability to analyze complex security situation and provide sensible recommendation to a variety of technical/non-technical stakeholders

• Ability to stay calm in stressful situation and remain tactical to drive strategic outcome for our organization

• Broad understanding of SAP products

• Understanding of OWASP Top Ten and common vulnerability types

• Understanding how CVSS, CVE, and CWE work together

Preferred skills:

• Understanding of Cyber Security Framework and its relation to product security

• Understanding of Secure SDLC

• Understanding of common security architectures, general awareness of compliance framework like CRA, FIPS, ISO 27001

• Certifications like CISSP, CSSLP, CCSP, OSCP, CEH, or SANS certifications are assets

What you bring

• 5-7 years of experience in security in roles like an application security developer

• Experience in leading through complex situations in application security

• Experience in working with developers, DevOps, or other development-supporting roles

• Experience in executive communication and external/media communication is preferred

Bring out your best

SAP innovations help more than four hundred thousand customers worldwide work together more efficiently and use business insight more effectively. Originally known for leadership in enterprise resource planning (ERP) software, SAP has evolved to become a market leader in end-to-end business application software and related services for database, analytics, intelligent technologies, and experience management. As a cloud company with two hundred million users and more than one hundred thousand employees worldwide, we are purpose-driven and future-focused, with a highly collaborative team ethic and commitment to personal development. Whether connecting global industries, people, or platforms, we help ensure every challenge gets the solution it deserves. At SAP, you can bring out your best.

We win with inclusion

SAP’s culture of inclusion, focus on health and well-being, and flexible working models help ensure that everyone - regardless of background - feels included and can run at their best. At SAP, we believe we are made stronger by the unique capabilities and qualities that each person brings to our company, and we invest in our employees to inspire confidence and help everyone realize their full potential. We ultimately believe in unleashing all talent and creating a better world.

SAP is committed to the values of Equal Employment Opportunity and provides accessibility accommodations to applicants with physical and/or mental disabilities. If you are interested in applying for employment with SAP and are in need of accommodation or special assistance to navigate our website or to complete your application, please send an e-mail with your request to Recruiting Operations Team: [email protected].

For SAP employees: Only permanent roles are eligible for the SAP Employee Referral Program, according to the eligibility rules set in the SAP Referral Policy. Specific conditions may apply for roles in Vocational Training.

Qualified applicants will receive consideration for employment without regard to their age, race, religion, national origin, ethnicity, gender (including pregnancy, childbirth, et al), sexual orientation, gender identity or expression, protected veteran status, or disability, in compliance with applicable federal, state, and local legal requirements.

SAP believes the value of pay transparency contributes towards an honest and supportive culture and is a significant step toward demonstrating SAP’s commitment to pay equity. SAP provides the annualized compensation range inclusive of base salary and variable incentive target for the career level applicable to the posted role. The targeted combined range for this position is 77500-166200CAD. The actual amount to be offered to the successful candidate will be within that range, dependent upon the key aspects of each case which may include education, skills, experience, scope of the role, location, etc. as determined through the selection process. Any SAP variable incentive includes a targeted dollar amount, and any actual payout amount is dependent on company and personal performance. A summary of benefits and eligibility requirements can be found by clicking this link: www.SAPNorthAmericaBenefits.com.

Due to the nature of the role, which involves global interactions with SAP entities, as well as with employees and stakeholders in Canada, functional proficiency in English is required for positions based in the Quebec.

AI Usage in the Recruitment Process

For information on the responsible use of AI in our recruitment process, please refer to our Guidelines for Ethical Usage of AI in the Recruiting Process.

Please note that any violation of these guidelines may result in disqualification from the hiring process.

Requisition ID: 456807 | Work Area: Solution and Product Management | Expected Travel: 0 - 10% | Career Status: Professional | Employment Type: Regular Full Time | Additional Locations: #LI-Hybrid