11 hours ago
Shanghai, ChinaSenior
Responsibilities
- Design and implement resilient security architectures across on-premise SAP systems and SAP BTP.
- Harden SAP platforms and secure SAP technical attack surfaces at the protocol and infrastructure level.
- Design and implement cloud identity, federation, and authorization architectures.
- Develop advanced threat detection capabilities, detection engineering, and SIEM workflows.
- Support incident response, offensive security validation, and penetration testing activities.
- Build automated security tooling using scripting and collaborate with regional and globally distributed engineering teams.
- Secure SAP environments within China regulatory and regional deployment constraints.
- Support overlapping schedules with US-based teammates and participate in occasional international travel.
Requirements
- Bachelor’s degree in Computer Science, Information Security, Engineering, or equivalent practical experience.
- Hands-on security engineering experience for enterprise ERP or large-scale, business-critical platforms.
- Technical depth with on-premise SAP, including NetWeaver and HANA, and SAP BTP.
- Experience securing SAP attack surfaces involving RFC, SAP Gateway, ICM/Web Dispatcher, SAProuter, and Cloud Connector.
- Experience designing cloud identity, federation, and authorization architectures using OAuth 2.0, OIDC, SAML, JWT validation, mTLS, and SAP Cloud Identity Services.
- Experience in at least two of security architecture design, detection engineering/SIEM development, incident response, and offensive security or penetration testing.
- Experience with Linux system administration, network architecture, and scripting, preferably Python.
- Professional fluency in written and spoken English and Mandarin.
- Master’s degree in Cybersecurity, Computer Science, or a related technical field is preferred.
- Experience with China Cybersecurity Law, Data Security Law, PIPL, MLPS graded protection, and commercial cryptography standards is preferred.
- Experience with SAP Enterprise Threat Detection, Focused Run, detection-as-code, SIEM workflows, Kubernetes, container security, SAP Kyma, SAP Integration Suite, regional public clouds, and security certifications such as CISSP or OSCP is preferred.
Benefits
- The role is located in the Greater China region and supports collaboration with US-based teammates on an overlapping schedule.
- Occasional international travel is required.
Tech Stack
Categories
About Apple
Apple designs and sells consumer electronics, software, and services for consumers and professionals worldwide, including iPhone, Mac, iPad, Apple Watch, and AirPods, plus platforms like iOS/macOS and services such as the App Store, iCloud, Music, and TV+. Its business combines device sales with services and subscriptions and in-house silicon design. Founded in 1976, Apple is headquartered in Cupertino, California, and trades on NASDAQ as AAPL.