SAP Security Engineer - SAP Cybersecurity
Core
Design and implement resilient security architectures for on-premise SAP systems and SAP Business Technology Platform (BTP) in Greater China, establishing threat detection and ensuring infrastructure withstands cyber threats.
Role type
Senior IC SAP Security Engineer
Builds
Regional SAP security controls, identity federation, threat detection rules, and incident response capabilities for Apple's mission-critical systems.
Domain
Enterprise ERP Security / Cloud Security / Cybersecurity
Required skills
SAP security engineering, SAP BTP security, threat detection engineering, incident response, offensive security/penetration testing, Linux system administration, network architecture, scripting (Python), cloud identity/federation (OAuth 2.0, OIDC, SAML, JWT, mTLS), SAP protocol security (RFC, Gateway, ICM, Cloud Connector)
Preferred skills
China regulatory compliance (Cybersecurity Law, PIPL, MLPS), SAP threat detection platforms (Enterprise Threat Detection, Focused Run), Kubernetes/container security, SAP Integration Suite security, cloud security posture management (Alibaba Cloud, Tencent Cloud, AWS China, Azure China), security certifications (CISSP, OSCP)
Technologies
S/4HANA, HANA, SAP BTP, Kyma, RSAU, SAProuter, Cloud Connector, Alibaba Cloud, Tencent Cloud, AWS China, Azure China, Python, Kubernetes
Responsibilities
Architect platform-level security controls for SAP environments including transport encryption, key management, host baselines, and network segmentation. Secure and govern SAP BTP subaccounts implementing least-privilege access and identity federation. Develop and tune high-fidelity threat detection rules for SAP-specific attacker behavior. Lead technical incident response and forensic containment for regional SAP security events. Execute offensive validation and attack-path analysis across SAP protocols and containerized workloads. Implement technical controls aligned with regional cybersecurity regulations and data security standards. Evaluate security posture across regional cloud hosting providers and external software components. Collaborate cross-functionally with SAP Basis, infrastructure, network, and application teams.
Seniority
Senior, hands-on IC
