Security AI Automation Architect

About the job

We help the world run better
At SAP, we keep it simple: you bring your best to us, and we'll bring out the best in you. We're builders touching over 20 industries and 80% of global commerce, and we need your unique talents to help shape what's next. The work is challenging – but it matters. You'll find a place where you can be yourself, prioritize your wellbeing, and truly belong. What's in it for you? Constant learning, skill growth, great benefits, and a team that wants you to grow and succeed.

Security AI Automation Architect

We help the world run better At SAP, we keep it simple: you bring your best to us, and we'll bring out the best in you. We're builders touching over 20 industries and 80% of global commerce, and we need your unique talents to help shape what's next. The work is challenging – but it matters. You'll find a place where you can be yourself, prioritize your wellbeing, and truly belong. What's in it for you? Constant learning, skill growth, great benefits, and a team that wants you to grow and succeed.

What you’ll build

This is what you’ll own and create. Your work here won’t be incremental — it will define how we scale our security capability for years to come.

Your responsibilities:

• Architect AI-powered security solutions — design and deliver intelligent tooling that automates detection, triage, response, and reporting across the security landscape
• Build full-stack security products — develop end-to-end solutions that span backend automation engines, platform integrations, and front-end interfaces built with UI5 and React, purpose-built for security operations
• Engineer on AWS and BTP — leverage AWS cloud-native services and SAP BTP’s integration and extension capabilities to build scalable, resilient, and well-governed security platforms
• Develop in the right language for the right job — write production-grade code in GoLang for performance-critical agents and services, Python for AI/ML and automation pipelines, Java for enterprise integrations, and UI5/React where user experience is the differentiator
• Eliminate operational toil — identify repeatable, manual security processes and systematically replace them with scalable automation, freeing teams for higher-order work
• Develop agentic security workflows — build and refine AI agent pipelines that can reason over security data, escalate appropriately, and take defined autonomous actions
• Own the automation platform — establish and maintain the frameworks, standards, and reusable components that other engineers build upon
• Integrate across the stack — connect security tooling (SIEM, SOAR, EDR, vulnerability management, IAM) into cohesive, data-driven workflows via APIs and event-driven architectures on AWS and BTP
• Drive AI governance in security — define guardrails, validation approaches, and human-in-the-loop controls that ensure AI-assisted decisions are safe, auditable, and reliable
• Translate strategy into engineering — partner with security leadership to convert risk priorities into executable product roadmaps, then deliver against them
• Mentor and uplift — share your knowledge, review peers’ designs, and raise the technical bar of the team around you

What you bring:

These are the skills and attributes that will make you exceptional in this role. We care far more about what you’re capable of than the number of years on your CV.

What you bring to the table:

• Full-stack engineering ability — you’re comfortable working across the entire stack, from backend services and APIs to user-facing interfaces, and you understand how each layer interacts with the others
• Analytical thinking — you can deconstruct complex security problems and translate them into structured, automatable solutions
• AI/ML literacy — a working understanding of how large language models, classification models, or agentic frameworks can be applied to real-world security challenges
• Automation mindset — a strong grasp of API-driven integration and event-driven architecture, applied to eliminating toil at scale
• Security fundamentals — solid grounding in core security domains: threat detection, vulnerability management, identity, cloud security, or incident response
• Systems thinking — the ability to see how people, processes, and technology interact, and to design solutions that account for all three
• Communication — you can explain technical architecture to non-technical stakeholders and write documentation others actually want to read

Mandatory qualifications:

• Degree in Computer Science, Information Security, Engineering, or a demonstrably equivalent foundation of self-directed learning
• Hands-on proficiency with two or more of the following languages, with a genuine appetite to work across all of them:
• GoLang — backend services, automation agents, and high-performance tooling
• Python — AI/ML pipelines, security automation, scripting, and data processing
• Java — enterprise application development and platform integrations
• UI5 with React — building modern, responsive front-end interfaces within SAP ecosystems
• Practical experience building and deploying on AWS — including compute, serverless, event-driven, and security-relevant services (e.g. Lambda, EventBridge, GuardDuty, Security Hub, IAM)
• Familiarity with SAP Business Technology Platform (BTP) — including its integration, extension, and application development capabilities
• Understanding of security frameworks such as MITRE ATT&CK, NIST CSF, or equivalent
• Eligible to work in [Country] without sponsorship restrictions

Where you belong:

You’ll be joining SAP’s Global Security & Cloud Compliance (SGSC) organisation — specifically the Security Development & Engineering (SDE) unit, the internal engineering powerhouse within SGSC that builds the custom software and automation that powers SAP’s security at scale.

Who we are

SGSC is SAP’s organisation responsible for security and cloud compliance across the enterprise. Within it, SDE exists to drive automation and innovation — eliminating inefficiency, reducing risk, and delivering purpose-built solutions that serve every area of SGSC. We don’t buy what we can build better ourselves, and we hold ourselves to the same engineering standards as any world-class product team.

Our mission

We are dedicated to creating custom software and automation with a strong focus on providing a customer-centric service to all areas of SGSC. We promote horizontal integration across all SGSC central services and Lines of Business, connecting processes to improve efficiency, streamline resource allocation, and foster a culture of continuous risk reduction.

Our vision

To cultivate a world-class security and compliance process and controls automation Centre of Excellence — driven by a customer-centric and data-driven mindset — that sets new standards of efficiency and effectiveness across the organisation.

How we work

We operate as an Agile engineering team. Iterative development, continuous integration, automated deployment, and a relentless focus on quality and security are not aspirations here — they are how we operate day to day. We collaborate closely across SGSC, and we move fast without cutting corners.

What you’ll find here:

• A team that gives you real ownership over problems that matter at enterprise scale
• Investment in your growth — technically, professionally, and personally
• Psychological safety — we learn from failure rather than punish it
• A collaborative, low-ego culture where the best idea wins
• The diversity of perspectives that reflects the global organisation we support

We are committed to building an inclusive environment and welcome applicants from all backgrounds, disciplines, and career paths.