SAP Enterprise Threat Detection (ETD) Expert (m/f) - remote

SAP Enterprise Threat Detection (ETD) Expert (m/f)

Start: ASAP

Duration: 6 months

Location: remote

Role Overview: Expert will support on implementation, operation, and continuous improvement of SAP Enterprise Threat Detection Cloud within the RISE environment. This role focuses on security monitoring, threat detection, and incident analysis at the Application layer to protect customer systems and data.

Key Responsibilities

• Support on the deployment and configuration of SAP ETD Cloud, including integration with RISE systems and client 000 and Hana Database monitoring setup
• Develop, tune, and maintain detection rules, alert patterns, and correlation logic to identify cyberattacks and suspicious behaviors
• Support on monitor security events and alerts generated by SAP ETD, performing triage and escalation as required
• Support on conduct forensic analysis and root cause investigation on security incidents detected through ETD
• Collaborate with the Application Security team to translate threat intelligence into new detection use cases
• Maintain and improve ETD content, keeping detection capabilities aligned with the evolving threat landscape
• Produce regular reporting on threat detection activity, incident trends, and system coverage for internal stakeholders
• Contribute to Security Hardening initiatives by identifying patterns and systemic risks observed through monitoring

Required Skills & Experience

• Proven experience with SAP Enterprise Threat Detection (ETD) - configuration, content development, and operations
• Strong understanding of SAP application security concepts (ABAP, HANA, Basis) to contextualize security events
• Experience with SIEM concepts and security monitoring practices
• Knowledge of common attack patterns targeting SAP environments (eg privilege escalation, RFC abuse, unauthorized data access)
• Familiarity with SAP Security Audit Log, System Log, and other relevant SAP log sources
• Experience in RISE with SAP or SAP BTP environments is a strong plus