Information Systems Security Engineer (ISSE) - F/M

SAP SE; Levallois-Perret; On-site; EUR 90,000 - 120,000; Full time

Job summary

SAP Sovereign Cloud Services FR is seeking an Information Systems Security Engineer (ISSE) to protect our cloud landscapes, assess threats, and drive remediation in a SecNumCloud compliant environment. The role requires strong cloud security experience across GCP, Azure, and AWS, and hands-on architectural leadership within a sovereign French boundary.

Native-level French (C2) and collaboration across teams are essential.

Qualifications

• Bachelor's degree in a relevant field is required.
• Minimum 3 years in a Security Engineer role with cloud technologies.
• Strong knowledge of cloud security, compliance frameworks and SecNumCloud.
• Familiarity with Francophone regulatory context (NIS2) and French law.
• Experience with PASSI audit methodology and producing audit-ready evidence.
• Hands-on in SecDevOps practices and cloud-native security platforms.

Responsibilities

• Configure, maintain, and deploy cybersecurity technologies (IDS/IPS, EDR/XDR, SIEM, SOAR, CSPM, CNAPP, CASB, CIEM) in SecNumCloud v3.2.
• Own security architecture decisions for the sovereign cloud boundary to ensure data flow and API isolation.
• Provide technical leadership in security technology deployment and management.
• Develop controls and automations to identify compliance gaps.
• Identify gaps in processes, workflows, designs, and controls.
• Drive threat modelling and translate findings into remediation roadmaps.
• Mentor teammates on ANSSI frameworks and SecNumCloud requirements.
• Lead post-incident reviews and feed lessons into control automation.

Skills

Cloud security

Vulnerability management

ANSSI SecNumCloud

NIS2 compliance

Audit/assurance

Security architecture

Incident response

Collaboration across teams

French language (C2)

Education

Bachelor's degree in Cyber Security, Information Security, Computer Science, Engineering, or Information Technology

Tools

CNAPP

CWPP

CSPM

CIEM

GCP

Azure

AWS

Job description

We help the world run better
At SAP, we keep it simple: you bring your best to us, and we'll bring out the best in you. We're builders touching over 20 industries and 80% of global commerce, and we need your unique talents to help shape what's next. The work is challenging – but it matters. You'll find a place where you can be yourself, prioritize your wellbeing, and truly belong. What's in it for you? Constant learning, skill growth, great benefits, and a team that wants you to grow and succeed.

We are looking for an Information Systems Security Engineer (ISSE) who will help maintain our systems security posture and protect our cloud landscapes. This is a hands‑on role to assist in the protection of our systems, identification of threats/vulnerabilities, and the mitigation and remediation of said vulnerabilities to ensure security compliance.

What you will bring

• Bachelor's degree, ideally in Cyber Security, Information Security, Computer Science, Engineering, Information Technology

• Minimum 3 years of practical experience in a Security Engineer role working with cloud technologies

• Knowledge of cloud security, vulnerability management, major security compliance and development frameworks and principles

• Solid working knowledge of ANSSI SecNumCloud qualification requirements (v3.2 preferred), RGS, PGSSI-S, and ISO 27001/27017/27018

• Familiarity with NIS2 transposition into French law and its operational implications for OSE/OIV

• Understanding of PASSI audit methodology and ability to produce audit‑ready evidence packages

• Mastery in at least one of the SecDevOps practices, such as Security as Code, CI/CD, Infrastructure as Code, Secure Coding Practices, Cloud Governance and Compliance…

• Hands‑on experience with cloud‑native security platforms: CNAPP, CWPP, CSPM, CIEM — on GCP, Azure, or AWS, with awareness of French‑sovereign hosting constraints (e.g. S3NS, Bleu)

• In‑depth technical knowledge of cloud platforms – GCP, Azure, AWS

• Previous work experience with the various phases of security incident response

• Experience working in a dynamic environment requiring collaboration across multiple organizations

• Strong analytical and reasoning, problem‑solving, and decision‑making skills

• Excellent written, oral communication, and documentation skills

• A keen curiosity about all aspects of cyber security (especially in the Cloud)

• Use industry sources to stay current with known Cloud security issues

• Personable, reliable team player, who’s also capable of working independently

What you will built:

• Configure, maintain, administer, and deploy cybersecurity technologies (IDS/IPS, EDR/XDR, SIEM, SOAR, cloud vulnerability assessment, CSPM, CNAPP, CASB, CIEM) in compliance with SecNumCloud v3.2 control families and ANSSI hardening guides

• Own technical security architecture decisions for the sovereign cloud boundary — ensuring no data path, identity flow, or API surface violates SecNumCloud compartmentalization requirement.

• Provide technical leadership in the architecture, design, deployment, management, configuration and use of Cyber Security technologies

• Develop configuration controls and automations to identify compliance gaps

• Identify gaps in our current processes, workflows, designs, and controls

• Solve complex problems using data driven recommendations for changes and improvements while considering people, processes, and technology

• Provide mentoring and contribute to the overall growth and development of the team

• Drive threat modelling and attack‑surface analysis against the LPM/NIS2 threat model; translate findings into actionable remediation roadmaps

• Respond to and lead post‑incident reviews; feed lessons learned back into PSSI and control automation

• Mentor team members on ANSSI frameworks and SecNumCloud operational requirements

• Native or C2 French (mandatory — ANSSI interactions and PSSI documentation are in French)

Security clearance (Habilitation):

This position involves access to potentially classified information. Employment is conditional on obtaining a French government security clearance at the appropriate level. The selected candidate must submit to the corresponding SGDSN/ANS investigation process prior to onboarding.

Where you belong:

SAP Sovereign Cloud Services FR is a cloud offering designed to deliver SAP Intelligent Enterprise cloud solutions within the sovereign boundary of France. It aligns to the Critical Infrastructure requirements and offers SAP cloud solutions to organisations and entities with specific data sovereignty requirements.

#SAPSovereignCloudCareers

Bring out your best

Bring out your best
SAP innovations help more than four hundred thousand customers worldwide work together more efficiently and use business insight more effectively. Originally known for leadership in enterprise resource planning (ERP) software, SAP has evolved to become a market leader in end‑to‑end business application software and related services for database, analytics, intelligent technologies, and experience management. As a cloud company with two hundred million users and more than one hundred thousand employees worldwide, we are purpose‑driven and future‑focused, with a highly collaborative team ethic and commitment to personal development. Whether connecting global industries, people, or platforms, we help ensure every challenge gets the solution it deserves. At SAP, you can bring out your best.

We win with inclusion

We win with inclusionSAP’s culture of inclusion, focus on health and well‑being, and flexible working models help ensure that everyone – regardless of background – feels included and can run at their best. At SAP, we believe we are made stronger by the unique capabilities and qualities that each person brings to our company, and we invest in our employees to inspire confidence and help everyone realize their full potential. We ultimately believe in unleashing all talent and creating a better world.

SAP is committed to the values of Equal Employment Opportunity and provides accessibility accommodations to applicants with physical and/or mental disabilities. If you are interested in applying for employment with SAP and are in need of accommodation or special assistance to navigate our website or to complete your application, please send an e‑mail with your request to Recruiting Operations Team: [e-mail].

For SAP employees: Only permanent roles are eligible for the SAP Employee Referral Program, according to the eligibility rules set in the SAP Referral Policy. Specific conditions may apply for roles in Vocational Training.

Qualified applicants will receive consideration for employment without regard to their age, race, religion, national origin, ethnicity, gender (including pregnancy, childbirth, et al), sexual orientation, gender identity or expression, protected veteran status, or disability, in compliance with applicable federal, state, and local legal requirements.

Successful candidates might be required to undergo a background verification with an external vendor.

AI Usage in the Recruitment Process

For information on the responsible use of AI in our recruitment process, please refer to our Guidelines for Ethical Usage of AI in the Recruiting Process.

Please note that any violation of these guidelines may result in disqualification from the hiring process.

Requisition ID: 457491 | Work Area: Software-Development Operations | Expected Travel: 0 - 10% | Career Status: Professional | Employment Type: Regular Full Time | Additional Locations: #LI-Hybrid