← All roles

SAP Security Engineer - SAP Cybersecurity

Apple
Apply on company site
Shanghai, ChinaPosted 2w ago

About the role

Security engineer focused on securing SAP environments and SAP BTP within Apple’s China region, designing resilient security architectures, threat detection, incident response, and cross-functional collaboration to protect on-premise SAP systems and cloud-based SAP platforms.

Responsibilities

  • Architect and engineer platform-level security controls for regional SAP environments (S/4HANA, HANA, RFC/gateway, Web Dispatcher, and Cloud Connector), including transport encryption, key management, host baselines, and network segmentation.
  • Secure and govern SAP BTP subaccounts, implementing least-privilege access, IAS/IPS identity federation, SAML/OIDC trust configurations, and secure integration pathways.
  • Develop and tune high-fidelity threat detection rules for SAP-specific attacker behavior across the Security Audit Log (RSAU), HANA audit trails, BTP audit services, and Kyma runtime telemetry.
  • Lead technical incident response and forensic containment for regional SAP security events, coordinating with global incident response teams.
  • Execute offensive validation and attack-path analysis across SAP protocols, BTP configurations, and containerized workloads to identify weaknesses and translate findings into defenses.
  • Implement technical controls aligned with regional cybersecurity regulations, data security standards, cryptography requirements, and cross-border data transfer mechanisms.
  • Evaluate security posture across regional cloud hosting providers, external software components, and local service partners against Apple’s security baseline.
  • Collaborate with SAP Basis, infrastructure, network, and application teams for technical design reviews and secure integration into operating models.
  • - Bachelor’s degree in Computer Science, Information Security, Engineering, or equivalent practical experience.
  • - Experience in hands-on security engineering for enterprise ERP or large-scale platforms, with depth in on-premise SAP (NetWeaver, HANA) and SAP BTP.
  • - Experience securing SAP attack surfaces at protocol/infrastructure level (RFC, SAP Gateway, ICM/Web Dispatcher, SAProuter, Cloud Connector).
  • - Experience designing cloud identity, federation, and authorization architectures (OAuth 2.0, OIDC, SAML, JWT, mTLS, SAP Cloud Identity Services).
  • - Experience in at least two core security domains: security architecture design, detection engineering/SIEM, incident response, or offensive security/penetration testing.
  • - Linux system administration, network architecture, and scripting (Python) for automated tooling.
  • - Fluency in English and Mandarin; ability to collaborate across regional/global teams.
  • - Ability to support overlapping schedule with US teammates and travel occasionally.
  • - Master’s degree in Cybersecurity, Computer Science, or related field.
  • - Experience securing SAP environments under China regulatory frameworks (Cybersecurity Law, Data Security Law, PIPL, MLPS, cryptography standards).
  • - Experience administering SAP BTP in China (Shanghai) region, including local service catalogs and deployment constraints.
  • - Experience with SAP threat detection platforms (SAP ETD, Focused Run) and modern detection-as-code/SIEM workflows.
  • - Experience with Kubernetes/container security for SAP Kyma or cloud-native microservices.
  • - Experience with SAP Integration Suite security at scale, including keystore/certificate lifecycle management.
  • - Experience evaluating cloud security postures across Alibaba Cloud, Tencent Cloud, AWS China, Azure China.
  • - Industry certifications (CISSP, OSCP, or SAP/security credentials).

Qualifications

  • Bachelor’s degree in Computer Science, Information Security, Engineering, or equivalent practical experience.
  • Master’s degree in Cybersecurity, Computer Science, or related technical field.

Skills

Required:Security architecture designDetection engineering / SIEMIncident responseOffensive security / penetration testingSAP on-premise security (NetWeaver, HANA)SAP BTP securityCloud identity and federation (OAuth, OIDC, SAML, JWT)Linux administration, scripting (Python)Mandarin and English fluency
Last updated Oct 9, 2026. Interested? Apply on the company site.

About Apple

Discover the innovative world of Apple and shop everything iPhone, iPad, Apple Watch, Mac, and Apple TV, plus explore accessories, entertainment, and expert device support.

Discover the innovative world of Apple and shop everything iPhone, iPad, Apple Watch, Mac, and Apple TV, plus explore accessories, entertainment, and expert device support.

AirPods Max 2Apple ArcadeApple CardApple Fitness+Apple MusicApple TVApple TV+Apple Watch Series 11
Company profileWebsite

More open roles at Apple