Security & QA Analyst (Cloud Application Log Source)

Crave Infotech; Pune District; Hybrid; INR 900,000 - 1,300,000; Full time

Job summary

Crave Infotech is seeking a Security & QA Analyst to audit authentication configurations across SAP cloud applications (Signavio, Ariba, BTP, Commerce Cloud) and collect log data to identify usage patterns and risks. You will map integration credentials and support QA validation during cloud-application migrations.

The role requires 4–7 years of relevant experience, hybrid Pune work arrangement, and the ability to work independently across multiple platforms with varying tooling.

Qualifications

• 4-7 years of experience in security and QA for cloud applications.
• Experience with SAP cloud applications (Signavio, Ariba, BTP, Commerce Cloud).
• Experience with platform administration APIs and configuration exports.
• Knowledge of authentication methods: Basic Auth, API keys, OAuth 2.0, mTLS.
• Experience in log analysis and security validation across SaaS platforms.
• Understanding of Human and Non-Human Identities (NHI) and authentication controls.

Responsibilities

• Discover authentication configuration across SAP cloud applications through administration consoles, configuration exports and APIs.
• Extract and analyse available audit and access logs from each cloud application to identify Basic Authentication and static-credential usage.
• Identify integration users, API clients and stored credentials configured in each application, and map them to the systems they call.
• Assess logging and retention across platforms and identify where evidence for attribution is not available.
• Contribute the cloud-application portion of the Non-Human Identity inventory and disposition against the pattern catalogue.
• Support attribution by identifying the owning tenant, subaccount, workspace or configuration item for each credential.
• Support QA validation of migrated cloud application connections.

Skills

SAP cloud apps

Signavio

Ariba

BTP

Commerce Cloud

Platform APIs

Configuration exports

API authentication

OAuth 2.0

mTLS

Log analysis

SaaS security

Non-Human Identities

Independent work

Job description

Role: Security & QA Analyst (Cloud Application Log Sources)

Experience: 4 to 7 Years

Location: Pune | Hybrid

Notice Period: 0 to 30 Days

We are looking for a Security & QA Analyst to discover authentication configuration and usage across the customer's SAP cloud application estate including Signavio, Ariba, BTP and Commerce Cloud where credentials and log sources differ from system to system.

Key Responsibilities:

• Discover authentication configuration across SAP cloud applications through administration consoles, configuration exports and APIs.
• Extract and analyse available audit and access logs from each cloud application to identify Basic Authentication and static-credential usage.
• Identify integration users, API clients and stored credentials configured in each application, and map them to the systems they call.
• Assess what logging and retention each platform offers, and identify where evidence for attribution is not available.
• Contribute the cloud-application portion of the Non-Human Identity inventory and disposition against the pattern catalogue.
• Support attribution by identifying the owning tenant, subaccount, workspace or configuration item for each credential.
• Support QA validation of migrated cloud application connections.

Required Skills:

• Hands-on experience administering or securing SAP cloud applications such as Signavio, Ariba, BTP or Commerce Cloud.
• Experience working with platform administration APIs and configuration exports.
• Understanding of API authentication methods Basic Authentication, API keys, OAuth 2.0 client credentials, mTLS.
• Experience in log analysis and security validation across SaaS platforms.
• Understanding of Human and Non-Human Identities (NHI) and authentication controls.
• Ability to work independently across several platforms with differing tooling and terminology.