Security Consultant-Application Security

3 - 7 years

6 - 10 Lacs

Posted:6 hours ago| Platform: Naukri logo

Apply

Work Mode

Work from Office

Job Type

Full Time

Job Description


This role blends deep SAP ABAP technical skills with hands-on experience in identifying, mitigating, and preventing application-layer security vulnerabilities within SAP systems. You will work closely with SAP developers, security architects, and business stakeholders to ensure secure design, development, and deployment of SAP custom code and configurations across modules (ECC, S/4HANA, etc.) Required education Bachelor's Degree Preferred education Master's Degree Required technical and professional expertise
  • SAP ABAP Development & Code Security, Design, develop, and maintain custom SAP ABAP objects (Reports, SmartForms, BAPIs, BADIs, User Exits, Enhancements) in a secure and efficient manner.
  • Apply secure coding practices to mitigate common ABAP vulnerabilities such as code injection, SQL injection, unauthorized access, RFC misuse, and insecure authorization checks.
  • Perform peer code reviews and enforce secure development guidelines within the SAP development team.
    Application Security & Risk Management
  • Conduct security assessments of ABAP code using tools like SAP Code Vulnerability Analyzer (CVA), Virtual Forge/Onapsis, and manual review techniques. Collaborate with SAP Security and Basis teams to identify and remediate application-level risks. Support threat modeling and risk analysis activities for SAP custom applications and interfaces.
  • Monitor and manage security notes (SAP OSS), patches, and vulnerability disclosures relevant to SAP applications and ABAP components
    Preferred technical and professional experience
  • Provide guidance on authorization design (PFCG roles, object-level control) and ensure proper enforcement in custom code. Work closely with the Information Security team to align with security policies, regulatory requirements (e.g., SOX, GDPR), and internal controls.
  • Contribute to the definition of secure coding standards and development lifecycle processes for SAP projects. Strong understanding of SAP application security concepts, including roles/authorizations, RFC security, code-level security controls, and transport-level controls.
  • Experience with SAP CVA, Virtual Forge/Onapsis, SCI/SLIN, or other static code analysis tools. Familiarity with OWASP Top 10, SANS Top 25, and how they apply to SAP environments. Experience with ECC, S/4HANA, or industry-specific solutions (SAP IS modules) is preferred.
  • Mock Interview

    Practice Video Interview with JobPe AI

    Start Job-Specific Interview
    cta

    Start Your Job Search Today

    Browse through a variety of job opportunities tailored to your skills and preferences. Filter by location, experience, salary, and more to find your perfect fit.

    Job Application AI Bot

    Job Application AI Bot

    Apply to 20+ Portals in one click

    Download Now

    Download the Mobile App

    Instantly access job listings, apply easily, and track applications.

    coding practice

    Enhance Your Skills

    Practice coding challenges to boost your skills

    Start Practicing Now
    IBM logo
    IBM

    Information Technology

    Armonk

    RecommendedJobs for You