Product Security Engineer - Sap Learning System jobs at Sap in Malaysia, Kuala Lumpur

Job Title

Senior Developer(T3) / Development Expert(T4 PF) - Java/Python/Go - ISM Cloud Ops

We’re looking for an Expert Developer to guide software engineering teams through designing and building platform services for many internal customers, including development teams and DevOps teams. You will build next-generation microservices using cloud-first concepts and technologies including containerization, serverless architecture, and NoSQL data stores. You are organized, positive, creative, and focused on the user at all times (including our internal customers). You know when to make decisions and when to ask questions. You’re obsessed with detail and love finding new ways to solve users’ problems. Above all, you love to build terrific products.

• Design, development & delivery of new features as part of agile team

• Develop in Java/Golang/Python and similar programming languages.

• Deploy using Docker, Helm, and Kubernetes pipelines.

• Work effectively with Product Managers to own & ensure delivery against agreed priorities.

• Have a great understanding of all the personnel and roles supporting the team. As needed, collaborate with them and your leadership to drive improvements in those relationships and the desired outcomes.

• Mentor junior developers and lead scrum teams by setting positive examples.

• Build and maintain strong and effective relationships with internal and external stakeholders.

• Own cloud services end to end, implementing distributed systems using Hyperscaler services and best practices such as zero-downtime production deployments, canaries, frequent deployments, and feature-flag-driven development.

• Execute with an enterprise cloud mindset to deliver on security, compliance, and infrastructure initiatives with engineering program management

Role Requirement

• Bachelor's/Master’s Degree or equivalent in a technology related field (e.g., Computer Science, Engineering, etc.) required.

• Outstanding software engineering experience with at least 10 prior years of experience in software development.

• Demonstrated ownership of end-to-end solutions from design through delivery.

• Expert usage of Java, Golang or Python programming language.

• Ability to build and maintain effective relationships with technical product managers, architects, and technical teams across different product areas.

• Hands-on experience collaborating with a product management organization to facilitate requirements gathering and backlog refinement.

• Expertise in secure coding practices, compliance, open-source technologies and frameworks.

• DevOps mentality with an understanding of Continuous Integration, Continuous Delivery, Monitoring and Observability

• Hands-on experience with cloud native solutions

• Experience with Docker, Helm, Kubernetes, and a broad array of AWS and/or GCP hyperscaler primitives.

• Experience in Travel or Procurement technology domain is a plus.

• Excellent communication in English.

Job Segment:Cloud, Developer, Java, ERP, Software Engineer, Technology, Engineering

Job Overview:

An Auditor II provides first level review of end-user receipts and expense reports to ensure integrity and accuracy of their financial reimbursements following

the client’s specific policies and procedures.

Responsibilities:

• Provides first level assessment of receipts and expense reports in compliance to client’s subscription and policies and procedures
• Focuses on the following Global Audit Queues: Verify, Receipt and Policy Audit Clients, General Audit Clients and Level 4-5 Audit Clients (UK and AU VAT)
• Documents and recommends necessary corrections and additional requirements to complete the receipts and expense reports in a timely manner
• Utilizes tools and systems proficiently to process receipts and expense reports and accordingly escalates issues to immediate Supervisor as
• Provides additional duties such as own (versus team) data collation and reporting as deemed necessary to achieve and produce a high quality support solution
• Be aware of, and comply with, all corporate policies

Education, Experience & Training required:

• Must have two (2) years of tertiary education, or its equivalent knowledge, experience, and skill set

Must possess the following skills and/or abilities:

• Language Proficiency: Fluency in the target language, particularly written form (read & write) often assessed through standardized tests.
• Attention to Detail: Strong analytical skills with the ability to spot errors and inconsistencies in documentation.
• Can work in a fast-paced environment, handling multiple priorities, at any given time
• Communication Skills: Above average verbal and written communication skills to effectively convey findings and collaborate with team members.
• Certifications: Relevant certifications in language proficiency can be beneficial.

• Integrity: Commitment to honesty and transparency in all auditing practices.
• Confidentiality: Ability to handle sensitive information with discretion and maintain client confidentiality.
• Professionalism: Adherence to ethical standards and professionalism in all interactions with clients and team members.
• Accountability: Willingness to take responsibility for one's work and decisions, ensuring accuracy and reliability in audits.
• Respect for Diversity: Appreciation for cultural differences and the ability to work respectfully with individuals from various backgrounds.
• Continuous Improvement: Commitment to ongoing professional development and staying updated on industry standards and ethical guidelines.

Value Competencies:

• Displays passion for & responsibility to the customer
• Displays leadership through innovation in everything you do
• Displays a passion for what you do and a drive to improve
• Displays a relentless commitment to win
• Displays personal & corporate integrity

​

We win with inclusion

SAP is proud to be an equal opportunity workplace and is an affirmative action employer. We are committed to the values of Equal Employment Opportunity and provide accessibility accommodations to applicants with physical and/or mental disabilities. If you are interested in applying for employment with SAP and are in need of accommodation or special assistance to navigate our website or to complete your application, please send an e-mail with your request to Recruiting Operations Team: Careers@sap.com
For SAP employees: Only permanent roles are eligible for the SAP Employee Referral Program, according to the eligibility rules set in the . Specific conditions may apply for roles in Vocational Training.

EOE AA M/F/Vet/Disability:

Requisition ID: 409948 | Work Area: Customer Service and Support | Expected Travel: 0 - 10% | Career Status: Graduate | Employment Type: Regular Full Time | Additional Locations: #LI-Hybrid.

Key Responsibilities:

• Design concise and understandable content for user flows, UI labels and texts, error messages, and contextual help within the product interface.
• Create, organize, and maintain user guides, FAQs, and tutorials that simplify complex concepts and enhance user understanding.
• Develop step-by-step walkthroughs and multimedia resources using platforms like WalkMe.
• Adopt a data driven content design mindset by seeking and utilizing user data from multiple data channels such as Telemetry, UA Surveys, User Testing & Research and Customer Engagement activities to enable you to take decisions based on insights and facts.
• Partner with cross-functional teams to ensure content is seamlessly integrated into product workflows.
• Regularly audit and improve existing documentation and in-product help to ensure clarity, relevance, accessibility and adherence to standards.
• Explore and implement new approaches, including AI-driven solutions, WalkMe to enhance user assistance content.

Role Requirement

• Proven experience in creating help documentation, in-product content and tutorials with overall experience of 4 to 6 years.
• Strong ability to simplify complex technical concepts into accessible and user-friendly content.
• Experience with tools such as DITA, WalkMe, Figma for creating and managing content is an added advantage.
• Excellent written and verbal communication skills in English.
• Familiarity with user-centered design methodologies and accessibility standards.
• Degree in English, Technical Writing, Communications, Design, Engineering, or a related technical field.
• Ability to grasp technical concepts and create easy-to-use documentation and flows.
• Passion for innovation, high attention to detail, and a commitment to delivering high-quality content.

​

Job Segment:ERP, User Experience, Cloud, Testing, Developer, Technology

You’ll be working closely with product owners, developers, user experience designers, and other UADs to create and enhance user assistance content. And you’ll also work on content initiatives to ensure the highest possible quality of our user assistance offerings.

On a day-to-day basis, you’ll translate complex technical features into easy-to-understand help content, follow guidelines and best practices, collaborate with your peers to support and contribute to the user assistance goals, share and receive constructive feedback with/from peers. And you’ll have a great time with people who love to collaborate and support each other and promote a growth mindset!

What you'll do

• Create new user assistance (UA) content for the SAP Signavio products using DITA-based authoring tools and the SAP Help Portal infrastructure
• Work with stakeholders and UX designers to define terminology and draft and fine-tune UI texts based on guidelines and to achieve the best possible user experience
• Create in-app help as primary contextual help
• Create help content for user guides, administration guides, APIs, and more
• Act as a reviewer for other UADs in the team

What you bring

• 1+ years of experience in producing documentation and user assistance for software products and services
• Excellent communication skills in English, written and spoken (all UA content is created in English)
• A clear, concise writing style and a passion for breaking down complicated things into simple words
• An eye for detail and a passion for delivering quality
• Familiarity with DITA-based content management system would be advantageous
• Experience with GitHub is a plus
• Ability to prioritize competing tasks in a fast-changing environment
• Experience with development teams working in an agile/Scrum mode or in feature-driven, cloud-native development is a plus
• A positive, open-minded, and collaborative personality with strong self-management skills, a proactive approach, and willingness to be a team player

What you’ll do

We are seeking a highly skilled Azure (Senior) DevOps Engineer to join our growing SAT team in Berlin. This role is crucial for enhancing our cloud infrastructure, ensuring secure deployments, and supporting our Operations Control Plane (OCP) and automation initiatives. The ideal candidate will have extensive experience in Azure cloud services, CI/CD pipelines, and Infrastructure as Code (IaC) to drive operational excellence and scalability.

• Design, implement, and maintain scalable and secure Azure infrastructure to support SAT team projects.
• Develop and manage CI/CD pipelines to automate deployment and ensure high availability of services.
• Collaborate with software development teams to enhance application scalability, performance, and reliability.
• Implement Infrastructure as Code (IaC) using tools like Terraform, Bicep, or ARM templates.
• Ensure system security and compliance with organizational standards and best practices.
• Monitor system performance, troubleshoot issues, and implement proactive solutions.
• Collaborate with the Security and Compliance Engineer to address vulnerabilities and ensure data protection within regional boundaries.
• Support OCP development efforts by providing expertise in Azure services and infrastructure management.
• Drive improvements in deployment automation, system reliability, and performance optimization.
• Document technical processes, configurations, and best practices for the SAT team knowledge base.

What you bring

• 6+ years of experience as a DevOps Engineer, with a strong focus on Azure cloud services.
• Proficiency in Infrastructure as Code (IaC) using tools like Terraform, Bicep, or ARM templates.
• Strong experience in designing and managing CI/CD pipelines (e.g., Azure DevOps, GitHub Actions, Concourse).
• Expertise in scripting languages such as PowerShell, Bash, or Python.
• Solid understanding of containerization technologies (e.g., Docker, Kubernetes) and orchestration frameworks.
• Hands-on experience with monitoring and logging tools such as Azure Monitor, Grafana, or Prometheus.
• Familiarity with security best practices and compliance frameworks for cloud environments.
• Strong problem-solving skills, with the ability to work independently and collaboratively in a fast-paced environment.
• Excellent communication and documentation skills.

Preferred Qualifications

• Azure certifications such as Microsoft Certified: Azure DevOps Engineer Expert or Microsoft Certified: Azure Solutions Architect Expert.
• Experience in managing and optimizing OCP environments.
• Familiarity with SAP4ME architecture and data processing principles.

The position can be filled in part time as well.

What We Offer

• An opportunity to work with cutting-edge Azure technologies in a dynamic and collaborative environment.
• The chance to contribute to strategic initiatives such as OCP development and security automation.
• Flexible working arrangements and competitive compensation.
• Opportunities for career growth within our expanding SAT team structure.

As a Product Security Engineer, you will play a pivotal role in shaping the security landscape for SAP Learning products, applications, and services. Joining a youthful and ambitious team, you will be responsible for developing and maintaining end-to-end security concepts across our landscape. You will maintain awareness of industry security architecture best practices, and research and test their applicability. You will work with product management, product engineering, and other cyber security professionals to design and implement secure processes and development practices.

Security Governance & Compliance:

• Understand and contribute to SAP's standards, enterprise governance, and global security policies.
• Act as the subject matter expert in Application (AppSec) and Operational (OppSec) security risk management.
Risk Assessment & Mitigation:

• Oversee security risks, conduct targeted security risk assessments, and review security exceptions.
• Understand the concrete agile delivery process of the organisation and ensure that the delivery is reinforced with all quality and security standards
• Evaluate the criticality of the security vulnerabilities and risks to ensure an outstanding time-to-marked
• Actively work on automation together with the agile teams to streamline the quality of the delivery
Strategic Leadership:

• Advise corporate leadership on risk reduction proposals, backed by cost justifications.
• Provide leadership, mentoring, and training to security personnel and other SAP stakeholders.
Collaboration & Communication:

• Work collaboratively with internal and external partners for third-party security assessments.
• Develop and monitor security risk metrics, providing periodic updates to executive management.
Secure Development Knowledge:

• Perform Secure Code Review identify and address potential securities Vulnerabilities to ensure robust, secure application.
• Should have knowledge of OWASP Top 10, SANS 25 and NIST Framework.
• Having Hands on Knowledge of implementing Secure development Pipeline of DevSecOps Mind set.
• Having hands on Knowledge on Threat modelling.
• Having Knowledge of Handling Zero-day Vulnerability Management to proactively identify, assess and mitigate emerging threats.

What you’ll bring

• BA/BS in Computer Science, Information Security, Business Administration or related work experience
• Minimum of five (5) years of managing IT initiatives/project management required
• Minimum of five (5) years information security, audit, risk management, compliance or risk consulting related experience preferred
• Experience working with Azure Pipelines, GitHub, and GitOps
• Experience managing vulnerabilities with multiple SAST, OSS,FOSS and IP-Scan analysis tools for large solutions
• Hands-on experience securing, managing and/or designing micro-service cloud solutions
• Knowledge and experience on network and application security on cloud infrastructure including Azure and SAP BTP (Cloud Foundry and Kyma) preferred
• Experience using Governance, Risk and Compliance (GRC) tools preferred
• Security certification, e.g. CISSP, CISA - CRISC preferred
• Ability to demonstrate analytical expertise, close attention to detail, excellent conflicesolution and negotiation skills, logic, and solution orientation and to learn and adapt quickly, thinking out of the box mindset
• Excellent written and oral communication skills in English
• Ability to understand and operate in a dynamic and agile environment
• Proven experience working in multi-functional and multi-cultural teams
• Proactive, self-managed, and able to interface well with sponsor personnel and inter-disciplinary teams across an organization
• Experience with information security compliance audit frameworks and requirements, e.g. NIST, COBIT, CMMI, ISO27001, FISMA, FedRAMP, SOC, SOX, PCI-DSS, GDPR and Data Privacy

​

Job Segment:Cloud, ERP, Testing, Training, Cyber Security, Technology, Education, Security