SAP NS2 Senior Security Compliance Engineer

We help the world run better

At SAP, we enable you to bring out your best. Our company culture is focused on collaboration and a shared passion to help the world run better. How? We focus every day on building the foundation for tomorrow and creating a workplace that embraces differences, values flexibility, and is aligned to our purpose-driven and future-focused work. We offer a highly collaborative, caring team environment with a strong focus on learning and development, recognition for your individual contributions, and a variety of benefit options for you to choose from. 

 

NS2 Compliance Engineering Team – Senior Security Compliance Engineer

 

NS2 COMPANY DESCRIPTION 

 

SAP is the global market leader for business software and related services. SAP National Security Services Inc.® (SAP NS2®) is an independent U.S. subsidiary of SAP.  At SAP NS2, we leverage best-in-breed technologies engineered by SAP to protect the lives, assets, and information of Americans. We offer SAP solutions with specialized levels of security and support to meet the requirements of U.S. national security and critical infrastructure customers. 

 

Must be a U.S. citizen; this position requires access to customer data.

SAP NS2 does not offer Visa sponsorships for this role.

All internals must have manager’s approval to transfer.

 

Here at SAP National Security Services (NS2), security impacts everything we do for our customers. We are currently looking for a highly motivated, driven individual with a passion for security, compliance, and working with other teams / customers to make a difference in the SAP NS2 security posture. 

 

 Key Responsibilities:

• Assist with various assessments via mock interviews, participation in assessment activities and collection of evidence
• Assist with Continuous Monitoring via review of scans, identification of vulnerabilities, tracking of remediation and interaction with various teams on recommended mitigation / remediation
• Providing a QA function for security components of product builds
• Leverage security tooling and reporting to ensure technical security findings are addressed and corrected.  Coordinate with Build and Operations teams to ensure security tooling and logging are in place
• Participate in overall security activities such as process improvement, ticket review and response

 

Minimum Qualifications:

 

• BS degree in Computer Science, MIS, Computer Engineering, or similar field, and 5-8+ years of technology experiences – or additional years of technology experiences in lieu of a BS degree
• 2+ years’ experience with security assessments of various frameworks such as FedRAMP, SOC, HIPAA, and ISO
• 2+ years’ experience with remediation of findings and vulnerabilities that are identified through assessment, scanning or penetration testing, including experience with analysis of scan results, Plan of Actions and Milestones, response to assessment findings, etc.
• 2+ years’ experience with Linux/Unix system administration, tools and architecture
• 2+ years’ experience with cloud applications and cloud SaaS architecture (web/app/db) on a variety of hyperscalers (AWS/Azure/GCP)

 

Preferred Qualifications

• 2+ years’ experience implementing and operationalizing security tools across a variety of applications and hyperscalers
• Demonstrated experiences logging into Windows and Linux systems to pull audit evidence, and troubleshooting and remediating security findings
• Effective communication and collaboration skills – experience working with other teams and customers on security challenges, assessment readiness, Continuous Monitoring tooling,