SAP Penetration Tester

at TEKsystems, Inc
Published August 27, 2018
Location Cupertino, CA
Category Default  
Job Type Full-time  


Title: Red Team Leader / Penetration Test Lead / Ethical Hacker
Request Summary
The SAP Security Department is seeking a resource to lead red-team security testing
exercises within its operating environment. In addition to strong reporting/communication
capabilities, the ideal resource will have 5+ years of experience leading penetration tests,
that include both technical and social-engineering analysis, and culminate in written risk
assessment reports with security control enhancement recommendations. Demonstrable
security experience with one or more of the following technologies is highly desirable: SAP
(or other ERP systems), Linux, AIX, Oracle, OSSEC, PCAP, tcpdump, Splunk, ELK,
Burpsuite, Nessus, Nexpose, Metaspoit, Qualys, HPFortify, AppSpider, Snort, Suricata,
JavaScript, SSL/TLS.

This person needs strong ethical hacking experience to help develop the Threat Model for their ERP environment. Apple uses SAP so previous SAP experience or ability to code in ABAP is a MAJOR plus but experience with other ERP solutions like Oracle is ok too.
The manager's main goal for this role is to find someone who can act as the Red Team in their environment and develop a real risk statement based on the proof of what they were able to access when attacking the system. The perception needs to shift from "There are nebulous threats out there regarding cyber security" to "Here is an example of how real people or groups could attack our environment and this is an example of the sensitive data that they could reach."
This person will be expected to keep up on new research regarding SAP and ERP exploit activity.

About TEKsystems:

We're partners in transformation. We help clients activate ideas and solutions to take advantage of a new world of opportunity. We are a team of 80,000 strong, working with over 6,000 clients, including 80% of the Fortune 500, across North America, Europe and Asia. As an industry leader in Full-Stack Technology Services, Talent Services, and real-world application, we work with progressive leaders to drive change. That's the power of true partnership. TEKsystems is an Allegis Group company.