Security Response Consultant @ SAP India

SUMMARY

The SAP Security Response Team manages a responsible disclosure of vulnerabilities on all SAP products and cloud solutions. Engaging external security researchers and hackers, the Security Response Team facilitates the delivery of security fixes together with development organizations across the company on monthly Security Patch Days. In addition to central coordination of vulnerabilities affecting software developed by SAP, it enables other organizations like SAP Global Legal, SAP Media Relations, and customer support in accurately representing SAP?s position on publicly discussed / disclosed vulnerabilities.

The SAP Security Response Team comprises security experts in Walldorf, Bangalore, and Vancouver.

EDUCATION AND QUALIFICATIONS / SKILLS AND COMPETENCIES

Required skills

• Bachelor or master?s Degree in computer science, information systems, or a related engineering discipline.
• Enthusiasm for security and technology; hacker mindset is a plus.
• Team player with excellent English oral and written communication skills.
• Experience in software development, focusing on security or secure software development practices

Preferred skills

• Experiences in managing critical security incidents or messages
• Industry certifications (e.g. CISSP, CISA, CCSK, Secure ) preferred
• Ability to participate or lead security industry effort and initiatives
• Ability to network inside and outside of SAP

EXPECTATIONS AND TASKS

• You will be a member of a dynamic international team comprising of experts in secure programming techniques who interact and advice developers on vulnerabilities reported in their components by security researchers and hackers alike.
• Combine your technical expertise with an experience in managing complex situations in communicating with leading security researchers, customers and SAP?s support organizations on confidential and sensitive disclosures.
• Assess the risk of a disclosure and ensure roll-out of security patches of high quality.
• Competently consult development teams on possible solutions with empowerment to drive the delivery of security fixes.
• Interact with Global Legal and Communications organizations in ensuring an aligned delivery of security advisories to customers.
• Be a competent representative of Security Response Team in meeting customers and security researchers alike.

WORK EXPERIENCE

• A minimum of two years of experience in Application Security or Incident Response in cloud environments is a must.
• Experiences in developing / hosting cloud applications / management of cloud services are an advantage.