Share this Job

Cybersecruity Incident Management Investigator -2 Job

Apply now »

Date: Nov 5, 2018

City: Shanghai, 31, CN

Company: SAP

Requisition ID: 166360
Work Area: Information Technology
Expected Travel: 0 - 10%
Career Status: Professional
Employment Type: Regular Full Time


As market leader in enterprise application software, SAP helps companies of all sizes and industries innovate through simplification. From the back office to the boardroom, warehouse to storefront, on premise to cloud, desktop to mobile device – SAP empowers people and organizations to work together more efficiently and use business insight more effectively to stay ahead of the competition. SAP applications and services enable customers to operate profitably, adapt continuously, and grow sustainably.


The SAP Cyber Defense and Response Center is part of the SAP Global Security Organization within the Product & Innovation board area.

SAP Cyber Defense and Response Center enables us to build up digital resilience and appropriate response measures to counter threats against our company. Within our global security framework, Cyber Defense and Response Center activities cover operational tasks within threat prevention, detection and response. This allows us to build the necessary resilience and defensive measures to keep up with fast-changing and steadily growing external threats. SAP Cyber Defense and Response Center helps ensuring the continuous delivery of our products and services towards our customers with excellence while preserving the security properties availability, integrity and confidentiality.

As an investigator and case manager, you will help providing the appropriate response to security incidents and support in the analysis process of security events. You will be responsible for managing the root-cause analysis, development of mitigation and response plans as well as driving the operational tasks to implement these plans. At the same time, you will be managing communications toward internal and external organizations in close alignment with other involved teams and processes.


Tasks & Expectations

·          take responsibility for the outcomes of your assigned projects and tasks

·          independently/autonomously solve complex technical tasks

·          work on large complex activities using your creativity and your professional expertise and specialist knowledge to deliver high quality results/solutions

·          collaborate in designing long-term concepts

·          work independently while setting priorities and providing regular project status and updates

·          make decisions independently and help enhancing current and future design and strategy

·          work in a global team collaborating with your colleagues and support where necessary

·          maintain partnerships and build contacts/networks with internal and external partners

·          working under pressure

·          working independently and in a multinational and multi-cultural team

·          communicate and convey information in a clear way that others can understand

·          communicate relevant information in a timely manner and provide constructive feedback to cross-functional colleagues and managers

·          perform professional hand-overs of tasks and projects

·          support in audits and certifications (ISO/SOC)

·          maintain and execute the security incident management process

·          perform root-cause analysis

·          perform security incident documentation and communication

·          participate in on-call rotation



·          bachelor degree (or equivalent) a must, Master a plus, international degrees preferred


Skills and Competencies

·          professional skills in English (written and spoken), preferably with excellent written and spoken skills in one or more local languages. (German a plus)

·          advanced IT security knowledge (system and network security)

·          advanced IT knowledge (Operating systems, networking, databases)

·          good knowledge of office collaboration tools

·          knowledge of IT security tools

·          scripting language knowledge is an advantage

·          strong and clear communication skills

·          strong foundation in norms and standards (ISO 27001, 27035, …)

·          accuracy and diligence in process execution

·          attention to detail is critical

·          analytical thinking

Working Experience

·          2- 5 years full-time experience in the field of Information Technology (preferably IT security)



To harness the power of innovation, SAP invests in the development of its diverse employees. We aspire to leverage the qualities and appreciate the unique competencies that each person brings to the company.

SAP is committed to the principles of Equal Employment Opportunity and to providing reasonable accommodations to applicants with physical and/or mental disabilities. If you are interested in applying for employment with SAP and are in need of accommodation or special assistance to navigate our website or to complete your application, please send an e-mail with your request to Recruiting Operations Team (Americas: or, APJ:, EMEA: Requests for reasonable accommodation will be considered on a case-by-case basis.

Additional Locations

Job Segment: Investigation, Manager, ERP, Network Security, SAP, Legal, Management, Technology, Security