Senior Data Platform SIEM Engineer

Senior Data Platform Siem Engineer

At SAP, we keep it simple: you bring your best to us, and we'll bring out the best in you. We're builders touching over 20 industries and 80% of global commerce, and we need your unique talents to help shape what's next. The work is challenging – but it matters. You'll find a place where you can be yourself, prioritize your wellbeing, and truly belong. What's in it for you? Constant learning, skill growth, great benefits, and a team that wants you to grow and succeed.

The Role

As a Senior Data Platform Siem Engineer, you'll be instrumental in the advancement, maintenance, and configuration of SAP's global logging and monitoring ecosystem. Your expertise in Splunk and other Siem platforms will be essential for sustaining the infrastructure that supports our global detection platform. Collaborating with key stakeholders, you will gather detailed requirements, ensure smooth implementations, and act as a point of escalation for system outages. Additionally, you'll mentor operations staff and advocate for data hygiene and quality. Your efforts in building new capabilities, optimizing systems, and meticulously documenting processes will ensure sustainability for future team members.

About Us

The Data Platform Engineering Team is responsible for developing the Siem platform used across partner organizations for incident response, cyber threat intelligence, and vulnerability management within SAP's lines-of-business. Our platform is the central investigative tool for the cyber defense & design team, enhancing the ability to analyze suspicious activities comprehensively. Furthermore, it supports IT operations workloads, facilitating proactive monitoring and compliance.

Key Qualifications

• Experience: Minimum of 5-7 years in data platform engineering, Siem management, or a similar field.
• Technical Expertise: Proficiency with data tools like Splunk, Cribl, and ELK; skill in handling standard data formats (JSON, CSV, syslog) and advanced regex/transforms/grok rules.
• Source Control and CI/CD: Strong understanding of GitHub VCS fundamentals and integration with CI/CD tools (e.g., Jenkins, GitHub Actions).
• Network and Linux Skills: Robust network design and troubleshooting capabilities, including DNS. Solid Linux administration skills, including the use of bash, GNU CLI tools, and subsystems like systemd; ability to articulate Linux concepts like filesystems and kernel tuning.
• AWS Management: Experience with AWS services, particularly managing EC2, Route53, Lambda, VPC, and S3

Desirable Skills

• Authentication Systems: Familiarity with enterprise authentication/authorization systems and protocols such as SAML, LDAP, and OIDC.
• Configuration Management: Experience with large-scale configuration management tools like Ansible, Chef, Puppet, or alternatives with API-based management.
• Certifications: Splunk Certified Admin, AWS Solution Architect, or similar relevant technical certifications.
• We are seeking a seasoned engineer with a proven track record and the certifications and skills that align with the evolving needs of our data platform infrastructure.

SAP innovations help more than four hundred thousand customers worldwide work together more efficiently and use business insight more effectively. Originally known for leadership in enterprise resource planning (ERP) software, SAP has evolved to become a market leader in end-to-end business application software and related services for database, analytics, intelligent technologies, and experience management. As a cloud company with two hundred million users and more than one hundred thousand employees worldwide, we are purpose-driven and future-focused, with a highly collaborative team ethic and commitment to personal development. Whether connecting global industries, people, or platforms, we help ensure every challenge gets the solution it deserves. At SAP, you can bring out your best.

SAP's culture of inclusion, focus on health and well-being, and flexible working models help ensure that everyone – regardless of background – feels included and can run at their best. At SAP, we believe we are made stronger by the unique capabilities and qualities that each person brings to our company, and we invest in our employees to inspire confidence and help everyone realize their full potential. We ultimately believe in unleashing all talent and creating a better world. SAP is committed to the values of equal employment opportunity and provides accessibility accommodations to applicants with physical and/or mental disabilities. If you are interested in applying for employment with SAP and are in need of accommodation or special assistance to navigate our website or to complete your application, please send an e-mail with your request to Recruiting Operations Team: Careers@sap.com.