Job Description

We help the world run better
At SAP, we keep it simple: you bring your best to us, and we'll bring out the best in you. We're builders touching over 20 industries and 80% of global commerce, and we need your unique talents to help shape what's next. The work is challenging – but it matters. You'll find a place where you can be yourself, prioritize your wellbeing, and truly belong. What's in it for you? Constant learning, skill growth, great benefits, and a team that wants you to grow and succeed. 

Founded in 1972 in Germany, SAP stands as a global leader in enterprise software and cloud technology, serving businesses of all sizes across various industries. Renowned for its innovative solutions, SAP provides a comprehensive suite of software applications ranging from ERP (Enterprise Resource Planning) and CRM (Customer Relationship Management) to analytics and supply chain management. With a customer-centric approach, SAP empowers organizations to streamline operations, drive efficiency, and gain valuable insights to make informed business decisions. Through its robust cloud platform, SAP offers scalable and agile solutions that enable businesses to adapt to evolving market demands and digital transformations seamlessly. With a steadfast commitment to innovation and excellence, SAP continues to shape the future of technology and remains a trusted partner for businesses worldwide.

SAP is seeking an experienced Strategic Cyber Threat Intelligence Analyst that will support SAP’s Strategic and Operational Intelligence teams where mission requirements overlap.  This position lives at the intersection of cyber intelligence, geopolitics and technology -candidates will have a keen understanding of how global politics and regional crises can drive and influence cyber operations as an instrument of statecraft.  This understanding will be applied to SAP’s global business interests and help drive critical decision making by senior leaders. This role requires deep expertise in open-source intelligence (OSINT) and academic research methodologies to identify strategic threats, assess their impact on SAP’s global business interests, and clearly communicate actionable insights to key stakeholders and SAP leadership.

As a Strategic Cyber Threat Intelligence analyst, you will author highly polished, well-researched reports to communicate threats facing SAP. In addition, the ideal candidate will have demonstrated experience in managing third-party risks relative to the impact of data breaches on parent organizations. The candidate will also work alongside CTI’s Operational Intelligence team to support efforts around SAP brand abuse by malicious actors. Lastly, this role requires a consummate team player willing to go above and beyond in a dynamic and fast-paced operational environment in delivering first rate intelligence analysis in support of SAP and its global business.

Key Responsibilities:

• Conduct advanced cyber threat intelligence analysis to identify emerging threats, vulnerabilities, and trends.
• Produce regular and ad-hoc intelligence reports of varying length, technical complexity, to include recommendations for defensive countermeasures or security engineering interventions.
• Translate line-of-business information needs into priority intelligence requirements (PIRs) and manage collection efforts supporting these PIRs.
• Integrate geopolitical insights with cyber threat intelligence to assess potential impacts on organizational operations and assets.
• Manage and fulfill consultation requests with security parters in disparate functional and thematic fields.
• Third-party risk management experience in the context of leveraging cyber threat intelligence to assess potential impact to parent organization.
• Show initiative in producing intelligence products and undertaking investigations which reflect a strong understanding of the role geopolitical events play in serving as indications and warnings for potential increased cyber activity and impact to business.
• Monitor digital channels and conduct proactive OSINT investigations to detect typo-squatted domains and other malicious activities targeting the organization's brand.
• Initiate and manage the process of issuing takedown requests for identified malicious domains and content, collaborating with legal teams and external partners as necessary.
• Develop highly polished intelligence reports utilizing graphics, charts, and impactful illustrations to distill complex geopolitical trends into actionable intelligence that stakeholders can synthesize into their decision support processes.
• Support the management of external intelligence relationships, including ISACs, public and private sector collaboration groups, and global cyber intelligence sharing organizations.
• Research and analyze cyber-threat actors, groups, and events to report on threatening tactics, techniques, and procedures (TTPs), behaviors, motivations, sponsorship, and related contextual and influencing factors.

Required Skills and Qualifications:

• Bachelor's degree in Cybersecurity, Information Technology, Political Science, Economics, Intelligence Studies, or related field.
• Proven experience (5+ years) as a Cyber Threat Intelligence Analyst with a focus on strategic intelligence combining cyber and geopolitical expertise.
• Extensive experience in digital brand monitoring and protection, including identifying and mitigating risks associated with typo-squatted domains.
• Strong proficiency in open-source intelligence (OSINT) methodologies and tools for gathering, analyzing, and interpreting threat data including Recorded Future.
• Excellent report writing skills with the ability to create clear, concise, and impactful intelligence reports incorporating graphics and visualizations.
• Exceptional communication skills, both written and verbal, to effectively convey technical information to non-technical stakeholders.
• Experience in conducting threat intelligence briefings and presentations to senior management and decision-makers.
• Good understanding of the intelligence lifecycle and associated analytic methodologies (Cyber Kill Chain, Diamond Model, ATT&CK, etc.)
• Strong analytical skills with the ability to think critically and to independently solve complex problems under tight timelines and with minimal direction or guidance.

Preferred Qualifications:

• Advanced degree in a related field.
• Certifications in Cyber Threat Intelligence.
• Experience with threat intelligence platforms, including Recorded Future, digital forensics tools, and incident response procedures.
• Familiarity with the cloud threat landscape.
• Familiarity with regulatory requirements and industry standards related to cybersecurity and data protection.
• Knowledge of programming or scripting languages (e.g., Python, PowerShell) for automation and data analysis.

Bring out your best
SAP innovations help more than four hundred thousand customers worldwide work together more efficiently and use business insight more effectively. Originally known for leadership in enterprise resource planning (ERP) software, SAP has evolved to become a market leader in end-to-end business application software and related services for database, analytics, intelligent technologies, and experience management. As a cloud company with two hundred million users and more than one hundred thousand employees worldwide, we are purpose-driven and future-focused, with a highly collaborative team ethic and commitment to personal development. Whether connecting global industries, people, or platforms, we help ensure every challenge gets the solution it deserves. At SAP, you can bring out your best.  

We win with inclusion
SAP’s culture of inclusion, focus on health and well-being, and flexible working models help ensure that everyone – regardless of background – feels included and can run at their best. At SAP, we believe we are made stronger by the unique capabilities and qualities that each person brings to our company, and we invest in our employees to inspire confidence and help everyone realize their full potential. We ultimately believe in unleashing all talent and creating a better world.

SAP is committed to the values of Equal Employment Opportunity and provides accessibility accommodations to applicants with physical and/or mental disabilities. If you are interested in applying for employment with SAP and are in need of accommodation or special assistance to navigate our website or to complete your application, please send an e-mail with your request to Recruiting Operations Team: Careers@sap.com.

For SAP employees: Only permanent roles are eligible for the SAP Employee Referral Program , according to the eligibility rules set in the SAP Referral Policy. Specific conditions may apply for roles in Vocational Training.

Qualified applicants will receive consideration for employment without regard to their age, race, religion, national origin, ethnicity, age, gender (including pregnancy, childbirth, et al), sexual orientation, gender identity or expression, protected veteran status, or disability.

Compensation Range Transparency : SAP believes the value of pay transparency contributes towards an honest and supportive culture and is a significant step toward demonstrating SAP’s commitment to pay equity. SAP provides the annualized compensation range inclusive of base salary and variable incentive target for the career level applicable to the posted role. The targeted combined range for this position is 109100 - 185500(USD) USD. The actual amount to be offered to the successful candidate will be within that range, dependent upon the key aspects of each case which may include education, skills, experience, scope of the role, location, etc. as determined through the selection process. Any SAP variable incentive includes a targeted dollar amount and any actual payout amount is dependent on company and personal performance. Please reference this link for a summary of SAP benefits and eligibility requirements:

AI Usage in the Recruitment Process

For information on the responsible use of AI in our recruitment process, please refer to our .

Please note that any violation of these guidelines may result in disqualification from the hiring process.

Requisition ID: 441739  | Work Area: Information Technology  | Expected Travel: 0 - 10%  | Career Status: Professional  | Employment Type: Regular Full Time   | Additional Locations:  #LI-Hybrid

Job Tags

Permanent employment, Full time, Worldwide, Flexible hours,

Similar Jobs