Senior Security Engineer

About the role

Nova Intelligence is building the most powerful AI platform for SAP teams. SAP is the heart of the enterprise: almost every critical business process at the world's largest companies — finance, supply chain, manufacturing, sales — runs on SAP. Our customers use Nova to 3x the productivity of their SAP teams: modernizing legacy code, redesigning business processes, resolving production issues, and more.

Nova Intelligence was founded by AI researchers, repeat entrepreneurs, and the co-inventor of SAP HANA, and has raised $40M from SAP.io http://SAP.io, Accel, Conviction, and Chemistry.

Check out the Launch Video https://player.mux.com/Ji004bNMQjBGUJvK5R4Yet6VTE9yASS6qQVLBwuB9ETI?amp%3Bmetadata-video-title=Nova+-+AI+Platform+for+SAP+Custom+Code&amp%3Bprimary-color=%23ffffff%29&amp%3Bvideo-title=Nova+-+AI+Platform+for+SAP+Custom+Code&poster=https%3A%2F%2Fimage.mux.com%2FJi004bNMQjBGUJvK5R4Yet6VTE9yASS6qQVLBwuB9ETI%2Fthumbnail.jpg%3Ftime%3D26%26width%3D1280%26height%3D720%26fit_mode%3Dcrop

ABOUT THIS ROLE

We're hiring Senior Security Engineers to design, harden, and continuously test the security of the Nova platform. Our mission is to build the most powerful AI platform for SAP — and that includes being the most secure. Nova operates inside the systems that run global business, with broad access and powerful capabilities; the security work is technically deep and central to the product.

WHAT YOU'LL DO

Own platform security architecture. You'll harden the security model of the platform across cloud and (in the future) on-prem deployments — isolation between customers and environments, identity and access policy, secrets and key management, and network controls. You'll work on real problems like preventing cross-service privilege paths, evolving customer-side audit access, maintaining tight scoping of admin credentials, and ensuring the agent's execution sandboxes can run untrusted code safely.

Lead our internal red team. You'll lead and extend our red team work — probing access controls and privilege boundaries, testing agent action boundaries (prompt injection, tool-use abuse, sandbox escape), validating tenant isolation under realistic attack patterns, and stress-testing our auth flows under adversarial pressure.

Solve hard auth and identity problems in SAP. SAP's identity model is idiosyncratic and the customer landscape is complex: federated SSO via IAS or other IdPs, SAML and OAuth flows across multiple systems, RFC connections, technical users, and a long tail of legacy auth patterns. You'll own how identity propagates from the customer's IdP through Nova into their SAP systems.

Raise our internal security baseline. SSO, deployment pipelines, secrets in CI/CD, code review controls, vendor onboarding, internal access. You'll set the standards, drive the implementation, and lead Nova's adherence to the compliance frameworks customers expect (SOC 2, ISO 27001, GDPR, CCPA). We treat these as the floor, not the ceiling.

Partner with customer security teams. Our enterprise customers run some of the most sophisticated security organizations in the world. You'll be the technical voice in the room with their CISOs, security architects, and DPOs — translating their requirements into platform changes and Nova's design into language their teams can defend internally.