Information Systems Security Engineer

We help the world run better
At SAP, we keep it simple: you bring your best to us, and we'll bring out the best in you. We're builders touching over 20 industries and 80% of global commerce, and we need your unique talents to help shape what's next. The work is challenging – but it matters. You'll find a place where you can be yourself, prioritize your wellbeing, and truly belong. What's in it for you? Constant learning, skill growth, great benefits, and a team that wants you to grow and succeed.

We are looking for an Information Systems Security Engineer (ISSE) who will help maintain our systems security posture and protect our cloud landscapes. This is a hands‑on role to assist in the protection of our systems, identification of threats/vulnerabilities, and the mitigation and remediation of said vulnerabilities to ensure security compliance.

What you will bring

• Bachelor's degree, ideally in Cyber Security, Information Security, Computer Science, Engineering, Information Technology

• Minimum 3 years of practical experience in a Security Engineer role working with cloud technologies

• Knowledge of cloud security, vulnerability management, major security compliance and development frameworks and principles

• Solid working knowledge of ANSSI SecNumCloud qualification requirements (v3.2 preferred), RGS, PGSSI-S, and ISO 27001/27017/27018

• Familiarity with NIS2 transposition into French law and its operational implications for OSE/OIV

• Understanding of PASSI audit methodology and ability to produce audit‑ready evidence packages

• Mastery in at least one of the SecDevOps practices, such as Security as Code, CI/CD, Infrastructure as Code, Secure Coding Practices, Cloud Governance and Compliance…

• Hands‑on experience with cloud‑native security platforms: CNAPP, CWPP, CSPM, CIEM — on GCP, Azure, or AWS, with awareness of French‑sovereign hosting constraints (e.g. S3NS, Bleu)

• In‑depth technical knowledge of cloud platforms – GCP, Azure, AWS

• Previous work experience with the various phases of security incident response

• Experience working in a dynamic environment requiring collaboration across multiple organizations

• Strong analytical and reasoning, problem‑solving, and decision‑making skills

• Excellent written, oral communication, and documentation skills

• A keen curiosity about all aspects of cyber security (especially in the Cloud)

• Use industry sources to stay current with known Cloud security issues

• Personable, reliable team player, who’s also capable of working independently

What you will built:

• Configure, maintain, administer, and deploy cybersecurity technologies (IDS/IPS, EDR/XDR, SIEM, SOAR, cloud vulnerability assessment, CSPM, CNAPP, CASB, CIEM) in compliance with SecNumCloud v3.2 control families and ANSSI hardening guides

• Own technical security architecture decisions for the sovereign cloud boundary — ensuring no data path, identity flow, or API surface violates SecNumCloud compartmentalization requirement.

• Provide technical leadership in the architecture, design, deployment, management, configuration and use of Cyber Security technologies

• Develop configuration controls and automations to identify compliance gaps

• Identify gaps in our current processes, workflows, designs, and controls

• Solve complex problems using data driven recommendations for changes and improvements while considering people, processes, and technology

• Provide mentoring and contribute to the overall growth and development of the team

• Drive threat modelling and attack‑surface analysis against the LPM/NIS2 threat model; translate findings into actionable remediation roadmaps

• Respond to and lead post‑incident reviews; feed lessons learned back into PSSI and control automation

• Mentor team members on ANSSI frameworks and SecNumCloud operational requirements

• Native or C2 French (mandatory — ANSSI interactions and PSSI documentation are in French)

Security clearance (Habilitation):

This position involves access to potentially classified information. Employment is conditional on obtaining a French government security clearance at the appropriate level. The selected candidate must submit to the corresponding SGDSN/ANS investigation process prior to onboarding.

Where you belong:

SAP Sovereign Cloud Services FR is a cloud offering designed to deliver SAP Intelligent Enterprise cloud solutions within the sovereign boundary of France. It aligns to the Critical Infrastructure requirements and offers SAP cloud solutions to organisations and entities with speci