senior application security consultant

Burraq Consulting

<div><div><div>Closing on: May 31, 2026</div></div><div><div><div><div><b>
Job Category: </b>Remote
</div><div><b>Job Type: </b>Freelance
</div><div><b>Job Location: </b>Pakistan
</div><div><b>Salary: </b>Project Based
</div><div><b>Experience: </b>5 Years
</div><div><b>Department: </b>Auditing and Compliance
</div><div><b>Education: </b>Masters in Cyber Security
</div></div></div></div><div><h3 class="jobSectionHeader"><b>About Us</b></h3>
<p>
Burraq Consulting is a leading training and consultancy firm in Pakistan, delivering professional services in HSE, ISO certifications, corporate training, and compliance solutions. We are expanding our technical team and looking for a Senior Information Security Consultant who can conduct ISO 27001 audits and meet the ISO requirements for our clients.</p>
<div>
</div><p></p><h3 class="jobSectionHeader"><b>Job Overview</b></h3>
<p>
We are seeking experienced <b>ISO 27001 Consultants</b> to support multiple client engagements on a project-to-project basis. The consultant will be responsible for implementing, auditing, and maintaining Information Security Management Systems (ISMS) in line with ISO 27001 requirements.</p>
<p>
This role is ideal for professionals who prefer flexible, assignment-based work and have hands-on experience delivering ISO 27001 certification projects across different industries.</p>
<div>
</div><p></p><h3 class="jobSectionHeader"><b>Key Responsibilities</b></h3>
<ul><li>Lead end-to-end <b>ISO 27001 implementation projects</b></li>
<li>Conduct <b>gap assessments</b> against ISO/IEC 27001 standards</li>
<li>Develop and review <b>ISMS documentation</b> (policies, procedures, risk registers, SoA, etc.)</li>
<li>Perform <b>risk assessments and risk treatment planning</b></li>
<li>Provide guidance on <b>Annex A controls implementation</b></li>
<li>Conduct <b>internal audits</b> and support clients during certification audits</li>
<li>Deliver <b>awareness and training sessions</b> to client teams</li>
<li>Liaise with certification bodies and external auditors</li>
<li>Ensure project timelines, deliverables, and quality standards are met</li>
</ul><p></p><h3 class="jobSectionHeader"><b>Requirements</b></h3>
<ul><li>Proven experience in <b>ISO/IEC 27001 implementation or consulting</b></li>
<li>Strong understanding of <b>ISMS framework and risk management methodologies</b></li>
<li>Experience with <b>Statement of Applicability (SoA)</b> and control mapping</li>
<li>Familiarity with <b>ISO 27001:2022</b> standard (preferred)</li>
<li>Lead Implementer and/or Lead Auditor certification (highly preferred)</li>
<li>Ability to manage multiple clients and projects independently</li>
<li>Strong documentation and communication skills</li>
</ul><p></p><h3 class="jobSectionHeader"><b>Preferred Skills</b></h3>
<ul><li>Experience in related standards (e.g., ISO 22301, ISO 20000, GDPR)</li>
<li>Background in IT, cybersecurity, or information security</li>
<li>Experience working with certification bodies</li>
<li>Industry exposure (e.g., IT, healthcare, finance, telecom)</li>
</ul><p></p><h3 class="jobSectionHeader"><b>Engagement Model</b></h3>
<ul><li>Project-based assignments with defined scope and timelines</li>
<li>Flexible working arrangements (remote or on-site depending on client needs)</li>
<li>Compensation based on project scope, complexity, and duration</li>
</ul><p></p><h3 class="jobSectionHeader"><b>How to Apply</b></h3>
<p>
Interested candidates are encouraged to submit their CV along with a portfolio of recent design work to: <b>people@burraqconsulting.com</b> with subject line &ldquo;<b><i>Information Security Consultant</i></b>&ldquo;.</p></div></div>

Senior Information Security (ISO 27001) Consultant

Fortinet

<div><div>We are looking for a <b>Senior Security Consultant &ndash; FortiGuard Proactive Services </b>to work in a dynamic and exciting new position reporting to the Director of our FortiGuard Security Consulting Services. In this very hands-on customer facing role the consultant&rsquo;s main objective is to deliver Fortinet&rsquo;s proactive consulting services ensuring the customer is better prepared to deal with a cyber security incident. Leveraging skills and experience in delivering security assessments and incident response, the consultant will be responsible for incident response readiness assessments helping to identify gaps, deliver table top exercises that are designed to test an organization&rsquo;s incident response plan and assisting in identifying security gaps in tools or processes, and assist customer organization&rsquo;s in the development of incident response playbooks that are part of an organization&rsquo;s larger Incident Response Plan. As a secondary objective the consultant will assist with continued development of our current and future assessment type services, and work closely with the sales teams.<br>
 </div><div></div><div>To be successful in this role the candidate must possess strong consulting skills, technical skills and able to work under tight timelines.<br>
</div><p></p><p><b>Responsibilities:
</b></p><ul><li>Lead customer facing proactive services engagements
</li><li>Develop and deliver tabletop exercises to customers
</li><li>Perform readiness assessments on customers&rsquo; security posture and Incident Response Plan
</li><li>Assist in the development of customer Incident Response Plans and playbooks.
</li><li><p>Continue to focus on the maturation of proactive services
</p></li><li><p>Deliver Response Trainings to customers
</p></li><li><p>Stay current with cyber security compliance, standards and framework revisions including NIST CSF, ISO/IEC27001, CIS, PCI, HIPPA, etc.
</p></li><li><p>Review current security programs and define the steps needed for meeting the applicable cybersecurity and information assurance instructions
</p></li><li><p>Assist in the development and recommendations of network topologies
</p></li><li><p>Develop complete and informative reports and presentations for both executive and technical audience<br>
</p></li></ul><p></p><p><b>Required Skills:
</b></p><ul><li>Ability to communicate effectively
</li><li>Experience interfacing with customers
</li><li>Experience building and delivering table top exercises
</li><li>Knowledgeable of multiple cyber security compliance frameworks and standards
</li><li>Knowledgeable in the development and use of incident response playbooks
</li><li>Experience with vulnerability assessments and cyber security audits
</li><li>Ability to assess and implement various security controls
</li><li>Understanding of incident response processes and tools
</li><li>Experience with delivering educational services and trainings
</li><li>A solid understanding of Active Directory and how to secure is a plus
</li><li>Strong knowledge of operating system internals and endpoint security experience.
</li><li>Able to communicate with both technical and executive personnel
</li><li>Excellent written and verbal communication skills a must
</li>Highly motivated, self-driven and able to work both independently and within a team<br>
<li>
</li></ul><p></p><p><b>Education:
</b></p><ul><li>Bachelor&rsquo;s Degree in Computer Engineering, Computer Science or related field
</li><li>Or 5+ years&rsquo; experience with cyber security assessments and incident response</li></ul></div>

Senior Security Consultant - FortiGuard Proactive Services - Kuwait

Amazon Web Services

<div><h2 class="jobSectionHeader"><b>DESCRIPTION</b></h2><p>
The Amazon Web Services Professional Services (AWS ProServe) team is seeking a skilled Senior Delivery Consultant to join our Cloud Security team. As a Senior Security Consultant, you&rsquo;ll work closely with customers to design, implement, and automate solutions in AWS to protect customer assets, enable customer security teams to operate more effectively, and ensure customers don&rsquo;t accept unnecessary risk.<br>
<br>
You will work in fast-paced, complex projects that focus on delivering transformative business and security outcomes for customers globally. The ideal candidate is a highly skilled technical security professional with the ability to coach and guide executive security and cloud leaders in their journey, addressing topics such as security strategy and optimizing cloud security operations while being able to dive deep into AWS security technology. Along the way, you&rsquo;ll be expected to invent, extend, and adapt technology to tailor solutions to customer needs as well as coach and mentor junior consultants to enable their success.<br>
<br>
The AWS Professional Services organization is a global team of experts that help customers realize their desired business outcomes when using the AWS Cloud. We work together with customer teams and the AWS Partner Network (APN) to execute enterprise cloud computing initiatives. Our team provides assistance through a collection of offerings which help customers achieve specific outcomes related to enterprise cloud adoption. We also deliver focused guidance through our global specialty practices, which cover a variety of solutions, technologies, and industries.<br>
<br>
Key job responsibilities<br>
As an experienced technology professional, you will be expected to:<br>
1. Act as the technical leader for customer engagements and/or the security workstreams of engagements, leading teams of consultants.<br>
2. Lead internal initiatives to deliver quantifiable impact<br>
3. Develop strategic relationships with internal and external leaders<br>
4. Design and implement complex, scalable, and secure AWS solutions tailored to customer needs<br>
5. Enable and engage delivery partners in project delivery<br>
6. Provide mentorship and coaching to develop others<br>
<br>
A day in the life<br>
You'll work with colleagues and customers to design, develop and implement security solutions that solve real-world problems. You'll have full access to all of AWS's Infrastructure and Agentic-AI tools. You'll spend your days innovating, building and deploying industry-leading technology.
<br>
<br>
About the team<br>
ABOUT AWS:<br>
<br>
Diverse Experiences
<br>
Amazon values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn&rsquo;t followed a traditional path, or includes alternative experiences, don&rsquo;t let it stop you from applying.
<br>
<br>
Why AWS
<br>
Amazon Web Services (AWS) is the world&rsquo;s most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating &mdash; that&rsquo;s why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses.<br>
<br>
Work/Life Balance
<br>
We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there&rsquo;s nothing we can&rsquo;t achieve in the cloud.<br>
<br>
Inclusive Team Culture
<br>
AWS values curiosity and connection. Our employee-led and company-sponsored affinity groups promote inclusion and empower our people to take pride in what makes us unique. Our inclusion events foster stronger, more collaborative teams. Our continual innovation is fueled by the bold ideas, fresh perspectives, and passionate voices our teams bring to everything we do.<br>
<br>
Mentorship and Career Growth<br>
We&rsquo;re continuously raising our performance bar as we strive to become Earth&rsquo;s Best Employer. That&rsquo;s why you&rsquo;ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional.</p><h2 class="jobSectionHeader"><b>
BASIC QUALIFICATIONS</b></h2><ul><li>5+ years of cloud architecture and solution implementation experience</li><li>5+ years of external or internal customer facing, complex and large scale project management experience</li><li>Bachelor's degree in computer science, engineering, mathematics or equivalent</li><li>3+ years of security, compliance and risk management experience</li><li>5+ years of integration, testing and automation experience</li></ul><h2 class="jobSectionHeader"><b>
PREFERRED QUALIFICATIONS</b></h2><ul><li>Knowledge of AWS services including compute, storage, networking, security, databases, machine learning, and serverless technologies</li><li>degree in advanced technology, or AWS Professional level certification</li><li>Knowledge of security and compliance standards including HIPAA and GDPR</li><li>Experience communicating technical concepts to diverse audiences in pre-sales environments</li><li>Experience scripting for automation (e.g., Python, Perl, Ruby)</li><li>Experience in the financial services industry</li><li>Hands-on technical expertise in building security capabilities in code, deploying infrastructure as code, and implementing enterprise security solutions (e.g. WAF, IPS, Anti-DDOS, SIEM)</li></ul><br>
Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.<br>
<br>
Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you&rsquo;re applying in isn&rsquo;t listed, please contact your Recruiting Partner.<p><br>
The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life &amp; AD&amp;D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits.</p><br>
USA, NJ, Jersey City - 169,000.00 - 228,600.00 USD annually<br>
USA, NY, New York - 169,000.00 - 228,600.00 USD annually</div><p></p>

Senior Security Consultant, Global Proserve Security

<div><div>We are looking for a Senior Consultant &ndash; FortiGuard Incident Response to work in a dynamic and exciting new position reporting to the Director of Operations for FortiGuard Security Consulting Services. The analyst will work directly with members of a world class incident response and forensics team. Our team is comprised of individuals with strong knowledge in malware hunting and analysis, reverse engineering, multiple scripting languages, forensics and threat actors TTPs . In this very hands-on customer facing role the consultant&rsquo;s main objective is to lead and manage the incident response engagements and train/mentor other security consultants. Leveraging your in-depth understanding of the threat actors&rsquo; tactics, techniques, procedures and tools as well as our flagship FortiEDR tooling you will need to quickly glean situational awareness to provide guidance to the team members as well as to the client. In addition, from time to time the candidate will help to create threat research work products such as blogs and presentations. To be successful in this role the candidate must be possess strong consulting skills, deep technical skills and able to work under tight timelines.<br>
</div><p></p><p><b>Responsibilities:
</b></p><ul><li>Assist the IR Lead during engagements and mentoring/training junior analysis
</li><li><p>Continue to focus on process improvement for the customer facing incident response services
</p></li><li><p>Conduct host-based analysis and forensic functions on Windows, Linux, and Mac OS X systems
</p></li><li><p>Conduct network forensics and log analysis during IR engagements
</p></li><li><p>Review firewall, web, database, and other log sources to identify evidence and artifacts of malicious and compromised activity
</p></li><li><p>Leverage our FortiEDR Platform to conduct investigations to rapidly detect and analyze security threats
</p></li><li>Perform memory forensics and file analysis as needed
</li><li>Monitor underground forums, our FortiGuard Threat Labs, along with other open-source intelligence outlets to maintain proficiency in latest actor tactics and techniques
</li><li><p>Preform basic reverse engineering of threat actor&rsquo;s malicious tools
</p></li><li><p>Develop complete and informative reports and presentations for both executive and technical audience
</p></li><li><p>Availability during nights/weekends as needed for IR engagements<br>
</p></li></ul><p></p><p><b>Required Skills:
</b></p><ul><li>Excellent written and verbal communication skills a must
</li><li>Experience interfacing with customers
</li><li>Experience with of at least one scripting language: Shell, Ruby, Perl, Python, etc
</li><li>Ability to data mine using YARA, RegEx or other techniques to identify new threats
</li><li><p>Experienced with EnCase, FTK, X-Ways, SIFT, Splunk, Redline, Volatility, WireShark, TCPDump, and open source forensic tools a plus
</p></li><li>Experience with malware analysis tools such as IDA Pro, OllyDbg, Immunity Debugger
</li><li>Hands-on experience dealing with APT campaigns, attack Tactics, Techniques and Procedures (TTPs), memory injection techniques, static and dynamic malware analysis and malware persistence mechanism
</li><li>Strong knowledge of operating system internals and endpoint security experience.
</li><li>Able to communicate with both technical and executive personnel
</li><li>Static and dynamic malware and log analysis
</li><li>Analysis of Linux and MAC binary files and the understanding of MAC internals is a plus but not required .
</li><li>Highly motivated, self-driven and able to work both independently and within a team
</li><li>Able to work under pressure in time critical situations and occasional nights and weekends work
</li><li>A solid understanding of Active Directory and how to secure is a plus
</li></ul><p><b>Education:
</b></p><ul><li>Bachelor&rsquo;s Degree in Computer Engineering, Computer Science or related field
</li><li>Or 5+ years&rsquo; experience with incident response and or Forensics</li></ul></div>

Senior Consultant - FortiGuard Incident Response

Google

<div>Please note: Applicants to this role must have work authorization in Saudi Arabia as this role is not eligible for work visa sponsorship.<br>
Note: Google's hybrid workplace includes remote and in-office roles. By applying to this position you will have an opportunity to share your preferred working location from the following:<br>
<br>
<b>In-office locations: Riyadh Saudi Arabia.</b><br>
<b>Remote location(s): Saudi Arabia.</b><h3 class="jobSectionHeader"><b>
Minimum qualifications:</b></h3><ul>
<li>Bachelor's degree in Computer Science, Information Systems, Cybersecurity or a related technical field or equivalent practical experience.</li>
<li>5 years of experience assessing and developing cybersecurity solutions across multiple security domains.</li>
<li>Experience in the consumption, processing, and analysis of Cyber Threat Intelligence (CTI) within an operational environment, supporting monitoring, detection, and response.</li>
<li>Experience in an intelligence practitioner role.</li>
<li>Ability to communicate in English and Arabic fluently, as this is a client facing role.</li></ul><br>
<h3 class="jobSectionHeader"><b>
Preferred qualifications:</b></h3><ul>
<li>Experience designing instructional materials and fostering a learning environment.</li>
<li>Experience in analyzing network, endpoint, and security logs or telemetry for security investigations and threat hunting.</li>
<li>Ability to approach addressing challenges, committed to enhancing CTI capabilities.</li>
<li>Ability to work in a cross-functional team environment with a focus on knowledge sharing and collaboration.</li>
<li>Ability to teach technical concepts to the audience.</li>
<li>Excellent written and verbal communication skills, with the ability to collaborate with various teams and stakeholders.</li>
</ul><div><h2 class="jobSectionHeader"><b>About the job</b></h2><p>
As a Security Consultant, you will be responsible for helping clients effectively prepare for, proactively mitigate, and detect and respond to cyber security threats. Security Consultants have an understanding of computer science, operating system functionality and networking, cloud services, corporate network environments and how to apply this knowledge to cyber security threats.
<br>
<br>
As a Security Consultant, you could work on engagements including assisting clients in navigating technically complex and high-profile incidents, performing forensic analysis, threat hunting, and malware triage. You may also test client networks, applications and devices by emulating the latest techniques to help them defend against threats, and will be the technical advocate for information security requirements and provide an in-depth understanding of the information security domain. You will also articulate and present complex concepts to business stakeholders, executive leadership, and technical contributors and successfully lead complex engagements alongside cross functional teams.</p><br>
<p>
In this role, you will act as an advisor and will be responsible for guiding the development of Cyber Threat Intelligence (CTI) functions across the globe and empowering cyber-security organizations to leverage threat intelligence at organizations.</p><div><div>
Part of Google Cloud, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. Mandiant's cybersecurity expertise has earned the trust of security professionals and company executives around the world. Our unique combination of renowned frontline experience responding to some of the most complex breaches, nation-state grade threat intelligence, machine intelligence, and the industry's best security validation ensures that Mandiant knows more about today's advanced threats than anyone.</div></div></div><div><h2 class="jobSectionHeader"><b>
Responsibilities</b></h2><ul>
<li>Conduct a comprehensive assessment of the organization's current threat intelligence capabilities, needs, and risks.</li>
<li>Design proactive CTI capabilities based upon discovery activities, in-line with best practices and desired client priorities.</li>
<li>Design and develop a comprehensive CTI training curriculum aligned with the organization's needs and the chosen tools/frameworks.</li>
<li>Deliver engaging training sessions to security analysts, engineers, and other team members on threat intelligence concepts, methodologies, and tools.</li>
<li>Travel to client sites up to 50% of the time as needed to directly engage and deliver intelligence consulting services.</li>
</ul></div>Google is proud to be an equal opportunity workplace and is an affirmative action employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. See also Google's EEO Policy and EEO is the Law. If you have a disability or special need that requires accommodation, please let us know by completing our Accommodations for Applicants form.</div>

Senior Cyber Threat Intelligence Consultant, Mandiant (English, Arabic)

DeepSource Technologies

<div><p>We are seeking an experienced <b>Senior API Security Engineer</b> to join our team on-site. The ideal candidate will have strong expertise in API gateway security, network security solutions, and SIEM integration, with a proven ability to protect enterprise environments against evolving cyber threats.</p><p></p>
<b>Key Responsibilities</b><ul><li>
Design, implement, and manage <b>API security solutions</b> across enterprise environments
</li><li>Configure and maintain <b>API Gateways</b> (e.g., F5, Kong, IBM DataPower)
</li><li>Implement and manage <b>IDS/IPS systems</b> for threat detection and prevention
</li><li>Integrate security solutions with <b>SIEM platforms</b> for monitoring and incident response
</li><li>Develop and enforce <b>API security policies</b>, including rate limiting, authentication, and threat protection
</li><li>Secure APIs by identifying and blocking <b>malicious patterns and automated bot attacks</b>
</li><li>Perform security assessments, vulnerability analysis, and risk mitigation
</li><li>Collaborate with cross-functional teams to ensure secure application delivery</li></ul><br>
<b>
Requirements</b><p><br>
Minimum <b>5+ years of experience</b> in API security and network security
</p><p>Hands-on experience with:
</p><ul><li><b>F5 / Kong / IBM DataPower API Gateways</b>
</li><li><b>IDS/IPS solutions</b>
</li><li><b>SIEM integration</b>
</li></ul><p></p><p>Strong understanding of:
</p><ul><li>API security best practices
</li><li>Network security architecture
</li><li>Threat detection and mitigation techniques
</li></ul><p></p><p>Experience in securing APIs against <b>common attack vectors (OWASP, bot attacks, etc.)</b>
</p><p>Relevant <b>security certifications are mandatory</b>:
</p><ul><li>CISSP
</li><li>GICSP
</li><li>Or equivalent</li></ul></div>

Senior API Security Engineer - Riyadh, KSA

<div><div><b>We help the world run better</b><br>
At SAP, we keep it simple: you bring your best to us, and we'll bring out the best in you. We're builders touching over 20 industries and 80% of global commerce, and we need your unique talents to help shape what's next. The work is challenging &ndash; but it matters. You'll find a place where you can be yourself, prioritize your wellbeing, and truly belong. What's in it for you? Constant learning, skill growth, great benefits, and a team that wants you to grow and succeed.</div><div></div><div><br>
SAP NS2 Application Security-Onsite - Chantilly, VA
</div><div>Must be able to obtain and maintain a clearance</div><div></div><p><br>
SAP is the global market leader for business software and related services. SAP National Security Services Inc.&reg; (SAP NS2&reg;) is an independent U.S. subsidiary of SAP. At SAP NS2, we leverage best-in-breed technologies engineered by SAP to protect the lives, assets and information of Americans<i>. </i>We<i> </i>offer SAP solutions with specialized levels of security and support to meet the requirements of U.S. national security and critical infrastructure customers.</p><p>
Must be a U.S. Citizen with active TS/SCI clearance; NS2 does not offer Visa sponsorships for this role.
</p><p>All internals must have manager&rsquo;s approval to transfer.</p><p>
The SAP Application Security Consultant candidate will be responsible for our security and controls in delivery and maintenance of solutions that meet our client&rsquo;s complex needs. Candidates should have knowledge or previous work experience in managing SAP applications in a cloud environment, understanding the complexities that come with cloud, and can effectively communicate cloud security design/architecture ideas to technical as well as non-technical client stakeholders. This is a full-time position, and due to security requirements is on-site only.</p><p><b>
Skills/Experience Requirements</b></p><ul><li>
4-10 years' experience <b>managing</b> SAP application security for the client's SAP landscape, from development up to production.</li><li>
Ability to design, configure, develop, and maintain SAP roles (composite and single) to align with business requirements.</li><li>
Participate in role redesign projects during upgrades or business transformations.</li><li>
Deep understanding of SAP authorization concepts catering to SAP S/4 HANA systems.</li><li>
Experience in application security implementation and maintenance, to include minor enhancements as well as support pack/version upgrades.</li><li>
Ability to effectively and efficiently troubleshoot security access issues, interacting with key functional/business stakeholders as necessary in order to resolve SAP Application Security errors/exceptions.</li><li>
Keeps oneself constantly abreast of the latest advancements on SAP S/4 HANA, and other emerging security authorization concepts.</li><li>
Knows the risks associated with application security vulnerabilities and proposes solutions to eliminate and/or mitigate those risks.</li><li>
Understanding of SOX, SOD, and SAP IT General Computer Controls, how these compliance requirements impact security, and provide solutions to address them.</li><li>
Support, develop, and enable junior team members.</li><li>
Provide SAP security technical training to client counterparts, as needed.</li></ul><p><b>
Additional Requirements</b></p><ul><li>
BA/BS Degree is required. Ideally in Computer Science, Cyber Security, Information Security, Engineering, Information Technology.</li><li>
Note: The job description is meant to be a guideline. It is not exhaustive, and we will expect the selected candidate to show flexibility and eagerness to undertake varied tasks and projects.</li></ul><div></div><div><b><br>
Bring out your best</b><br>
SAP innovations help more than four hundred thousand customers worldwide work together more efficiently and use business insight more effectively. Originally known for leadership in enterprise resource planning (ERP) software, SAP has evolved to become a market leader in end-to-end business application software and related services for database, analytics, intelligent technologies, and experience management. As a cloud company with two hundred million users and more than one hundred thousand employees worldwide, we are purpose-driven and future-focused, with a highly collaborative team ethic and commitment to personal development. Whether connecting global industries, people, or platforms, we help ensure every challenge gets the solution it deserves. At SAP, you can bring out your best.
<br>
<br>
<b>We win with inclusion</b><br>
SAP&rsquo;s culture of inclusion, focus on health and well-being, and flexible working models help ensure that everyone &ndash; regardless of background &ndash; feels included and can run at their best. At SAP, we believe we are made stronger by the unique capabilities and qualities that each person brings to our company, and we invest in our employees to inspire confidence and help everyone realize their full potential. We ultimately believe in unleashing all talent and creating a better world.<br>
<br>
SAP is committed to the values of Equal Employment Opportunity and provides accessibility accommodations to applicants with physical and/or mental disabilities. If you are interested in applying for employment with SAP and are in need of accommodation or special assistance to navigate our website or to complete your application, please send an e-mail with your request to Recruiting Operations Team: Careers@sap.com.<br>
<br>
For SAP employees: Only permanent roles are eligible for the SAP Employee Referral Program, according to the eligibility rules set in the SAP Referral Policy. Specific conditions may apply for roles in Vocational Training.</div><div><br>
Qualified applicants will receive consideration for employment without regard to their age, race, religion, national origin, ethnicity, age, gender (including pregnancy, childbirth, et al), sexual orientation, gender identity or expression, protected veteran status, or disability.</div><div></div><div><b><br>
Compensation Range Transparency</b>: SAP believes the value of pay transparency contributes towards an honest and supportive culture and is a significant step toward demonstrating SAP&rsquo;s commitment to pay equity. SAP provides the annualized compensation range inclusive of base salary and variable incentive target for the career level applicable to the posted role. The targeted annual combined range for this position is 131000-271600USD. The actual amount to be offered to the successful candidate will be within that range, dependent upon the key aspects of each case which may include education, skills, experience, scope of the role, location, etc. as determined through the selection process. Any SAP variable incentive includes a targeted dollar amount and any actual payout amount is dependent on company and personal performance. Please reference this link for a summary of SAP benefits and eligibility requirements: SAP North America Benefits.</div><div><b><br>
AI Usage in the Recruitment Process</b></div><div>
For information on the responsible use of AI in our recruitment process, please refer to our Guidelines for Ethical Usage of AI in the Recruiting Process.
</div><div>Please note that any violation of these guidelines may result in disqualification from the hiring process.<br>
<br>
Requisition ID: 452245 | Work Area: Information Technology | Expected Travel: 0 - 10% | Career Status: Professional | Employment Type: Regular Full Time | Additional Locations: #LI-Hybrid</div></div>

ISAP NS2 Application Security-Onsite - Chantilly, VA

Search 10000+ Senior application security consultant jobs near you this May. New roles added regularly across leading industries. Apply today.