Cloud Security Engineer – SecNumCloud & NIS2

SAP SE; Levallois-Perret; On-site; EUR 90,000 - 120,000; Full time

Job summary

SAP Sovereign Cloud Services FR is seeking an Information Systems Security Engineer (ISSE) to protect our cloud landscapes, assess threats, and drive remediation in a SecNumCloud compliant environment. The role requires strong cloud security experience across GCP, Azure, and AWS, and hands-on architectural leadership within a sovereign French boundary.

Native-level French (C2) and collaboration across teams are essential.

Qualifications

• Bachelor's degree in a relevant field is required.
• Minimum 3 years in a Security Engineer role with cloud technologies.
• Strong knowledge of cloud security, compliance frameworks and SecNumCloud.
• Familiarity with Francophone regulatory context (NIS2) and French law.
• Experience with PASSI audit methodology and producing audit-ready evidence.
• Hands-on in SecDevOps practices and cloud-native security platforms.

Responsibilities

• Configure, maintain, and deploy cybersecurity technologies (IDS/IPS, EDR/XDR, SIEM, SOAR, CSPM, CNAPP, CASB, CIEM) in SecNumCloud v3.2.
• Own security architecture decisions for the sovereign cloud boundary to ensure data flow and API isolation.
• Provide technical leadership in security technology deployment and management.
• Develop controls and automations to identify compliance gaps.
• Identify gaps in processes, workflows, designs, and controls.
• Drive threat modelling and translate findings into remediation roadmaps.
• Mentor teammates on ANSSI frameworks and SecNumCloud requirements.
• Lead post-incident reviews and feed lessons into control automation.

Skills

Cloud security

Vulnerability management

ANSSI SecNumCloud

NIS2 compliance

Audit/assurance

Security architecture

Incident response

Collaboration across teams

French language (C2)

Education

Bachelor's degree in Cyber Security, Information Security, Computer Science, Engineering, or Information Technology

Tools

CNAPP

CWPP

CSPM

CIEM

GCP

Azure

AWS

Job description

SAP Sovereign Cloud Services FR is seeking an Information Systems Security Engineer (ISSE) to protect our cloud landscapes, assess threats, and drive remediation in a SecNumCloud compliant environment. The role requires strong cloud security experience across GCP, Azure, and AWS, and hands-on architectural leadership within a sovereign French boundary.

Native-level French (C2) and collaboration across teams are essential.