Security Monitoring & Incident Response Analyst

We help the world run better
At SAP, we keep it simple: you bring your best to us, and we'll bring out the best in you. We're builders touching over 20 industries and 80% of global commerce, and we need your unique talents to help shape what's next. The work is challenging – but it matters. You'll find a place where you can be yourself, prioritize your wellbeing, and truly belong. What's in it for you? Constant learning, skill growth, great benefits, and a team that wants you to grow and succeed

This is a hybrid role based out Montreal. Hybrid is 3 days a week onsite, 2 days a week remote.

What you’ll do:

SAP Business Technology Platform (BTP) is SAP’s multi-cloud PaaS offering and the technological foundation of SAP cloud products. Thousands of customers are running critical business applications on it. Keeping our customers’ data secure and managing it in accordance with laws and regulations and mitigating cybersecurity risks is of highest importance

As a Security Monitoring & Incident Response Analyst in our BTP Security Risk Management team you will closely work with your colleagues in Walldorf, Germany as well as our DevOps teams and enable them to build and operate secure and compliant software

You will work with latest state-of-the-art technology and find ways to achieve highest grade of security and compliance. Developing, evaluating and implementing detection rules as well as support security monitoring and incident response by handling of alerts, triaging and incident response to ensure protection of company and allied assets.

What you bring:

• University Degree, preferably in an IT or a related discipline like Computer Science, physics, mathematics (STEM disciplines), or other adequate qualifications
• Basic knowledge in security monitoring, incident response and security information and event monitoring (SIEM)
• Initial knowledge in cloud technology like Kubernetes, Cloud Foundry and relevant cloud services as well as lean or agile DevOps practices and development frameworks
• Initial knowledge in information security frameworks and requirements (e.g. NIST, SOC)
• Security Certifications like CISSP, CCSP, CISA, GCFA, GCIH, GCIA, GNFA are an asset
• Proactive mindset, strong ownership and team spirit
• Fluent English language skills, both spoken and written

Meet your team:

The Security Risk Management team of SAP Business Technology Platform is a group of colleagues covering almost every security and compliance domain. We are taking a risk-based approach to security, supporting thousands of colleagues across the BTP organization. Our goal is to find efficient and technically sound solutions

Il s’agit d’un rôle « hybride » basé à Montréal. Le modèle hybride implique d’être présent sur site 3 jours par semaine et de travailler à distance 2 jours par semaine
Votre rôle : SAP Business Technology Platform (BTP) est l’offre PaaS multi-Cloud de SAP. Il s’agit de la base technologique de tous les produits de SAP en nuage. Des milliers de clients l’utilisent pour exécuter des applications essentielles à leur activité. Conserver les données de nos clients en sécurité et les gérer conformément aux lois et réglementations tout en atténuant les risques liés à la cybersécurité est de la plus haute importance
En tant qu’analyste responsable du contrôle de la sécurité et de la réponse aux incidents dans notre équipe Gestion des risques pour la sécurité BTP, vous travaillerez en étroite collaboration avec vos collègues de Walldorf (Allemagne) et nos équipes DevOps, dans le but de les aider à créer et exploiter des logiciels sécurisés et conformes aux réglementations
Vous travaillerez avec des technologies de pointe et chercherez comment atteindre le plus haut niveau de sécurité et de conformité. Développer, évaluer et implémenter des règles de détection ainsi que prendre en charge le contrôle de la sécurité et les réponses aux incidents (via la gestion des alertes, le tri et les réponses aux incidents) feront également partie de vos missions pour garantir la protection de la société et des actifs associés
Votre profil :

• Diplôme universitaire, de préférence en informatique ou dans un domaine lié, notamment en physique ou mathématiques (disciplines STEM), ou autres qualifications appropriées
• Connaissances de base du contrôle de la sécurité, de la réponse aux incidents et de la gestion des informations et des événements de sécurité (SIEM)
• Connaissances initiales des technologies en nuage comme Kubernetes, Cloud Foundry et des services en nuage pertinents, ainsi que des cadres de développement et des pratiques DevOps Agile ou Lean
• Connaissances initiales des exigences et cadres pour la sécurité des informations (par exemple NIST, SOC)
• Des certifications de sécurité (par exemple CISSP, CCSP, CISA, GCFA, GCIH, GCIA, GNFA) seraient un atout
• État d’esprit proactif, sens aigu des responsabilités et esprit d’équipe
• Anglais courant, à l’écrit et à l’ora

Votre équipe : L’équipe Gestion des risques pour la sécurité de SAP Business Technology Platform est constituée de collègues couvrant presque tous les domaines de sécurité et de conformité. Nous suivons une approche basée sur les risques pour contrôler la sécurité et accompagnons des milliers de collègues de l’organisation BTP. Notre objectif est de trouver des solutions efficaces et fiables d’un point de vue technique Bring out your best
SAP innovations help more than four hundred thousand customers worldwide work together more efficiently and use business insight more effectively. Originally known for leadership in enterprise resource planning (ERP) software, SAP has evolved to become a market leader in end-to-end business application software and related services for database, analytics, intelligent technologies, and experience management. As a cloud company with two hundred million users and more than one hundred thousand employees worldwide, we are purpose-driven and future-focused, with a highly collaborative team ethic and commitment to personal development. Whether connecting global industries, people, or platforms, we help ensure every challenge gets the solution it deserves. At SAP, you can bring out your best.

We win with inclusion
SAP’s culture of inclusion, focus on health and well-being, and flexible working models help ensure that everyone – regardless of background – feels included and can run at their best. At SAP, we believe we are made stronger by the unique capabilities and qualities that each person brings to our company, and we invest in our employees to inspire confidence and help everyone realize their full potential. We ultimately believe in unleashing all talent and creating a better world.

SAP is committed to the values of Equal Employment Opportunity and provides accessibility accommodations to applicants with physical and/or mental disabilities. If you are interested in applying for employment with SAP and are in need of accommodation or special assistance to navigate our website or to complete your application, please send an e-mail with your request to Recruiting Operations Team: [email protected].

For SAP employees: Only permanent roles are eligible for the SAP Employee Referral Program, according to the eligibility rules set in the SAP Referral Policy. Specific conditions may apply for roles in Vocational Training.

Qualified applicants will receive consideration for employment without regard to their age, race, religion, national origin, ethnicity, gender (including pregnancy, childbirth, et al), sexual orientation, gender identity or expression, protected veteran status, or disability, in compliance with applicable federal, state, and local legal requirements.

SAP believes the value of pay transparency contributes towards an honest and supportive culture and is a significant step toward demonstrating SAP’s commitment to pay equity. SAP provides the annualized compensation range inclusive of base salary and variable incentive target for the career level applicable to the posted role. The targeted combined range for this position is 74,600 - 156,800 (CAD) CAD. The actual amount to be offered to the successful candidate will be within that range, dependent upon the key aspects of each case which may include education, skills, experience, scope of the role, location, etc. as determined through the selection process. Any SAP variable incentive includes a targeted dollar amount, and any actual payout amount is dependent on company and personal performance. A summary of benefits and eligibility requirements can be found by clicking this link: www.SAPNorthAmericaBenefits.com.

Due to the nature of the role, which involves global interactions with SAP entities, as well as with employees and stakeholders in Canada, functional proficiency in English is required for positions based in the Quebec
AI Usage in the Recruitment Process For information on the responsible use of AI in our recruitment process, please refer to our Guidelines for Ethical Usage of AI in the Recruiting Process Please note that any violation of these guidelines may result in disqualification from the hiring process.

Requisition ID: 433416 | Work Area: Solution and Product Management | Expected Travel: 0 - 10% | Career Status: Professional | Employment Type: Regular Full Time | Additional Locations: #LI-Hybrid