Senior Security Engineer

📋 Job Overview

Nova Intelligence is building the most powerful AI platform for SAP teams. SAP is the heart of the enterprise: almost every critical business process at the world's largest companies — finance, supply chain, manufacturing, sales — runs on SAP. Our customers use Nova to 3x the productivity of their SAP teams: modernizing legacy code, redesigning business processes, resolving production issues, and more. Nova Intelligence was founded by AI researchers, repeat entrepreneurs, and the co-inventor of SAP HANA, and has raised $40M from SAP.io, Accel, Conviction, and Chemistry.

🏢 About Nova Intelligence

We're hiring Senior Security Engineers to design, harden, and continuously test the security of the Nova platform. Our mission is to build the most powerful AI platform for SAP — and that includes being the most secure. Nova operates inside the systems that run global business, with broad access and powerful capabilities; the security work is technically deep and central to the product.

🎯 The Role

You'll own platform security architecture. You'll harden the security model of the platform across cloud and (in the future) on-prem deployments — isolation between customers and environments, identity and access policy, secrets and key management, and network controls. You'll work on real problems like preventing cross-service privilege paths, evolving customer-side audit access, maintaining tight scoping of admin credentials, and ensuring the agent's execution sandboxes can run untrusted code safely.

✅ Key Responsibilities

• Own platform security architecture, hardening the security model across cloud and on-prem deployments.
• Lead our internal red team, probing access controls and privilege boundaries.
• Solve hard auth and identity problems in SAP, owning how identity propagates from the customer's IdP through Nova into their SAP systems.
• Raise our internal security baseline, setting standards and driving implementation.
• Partner with customer security teams, translating their requirements into platform changes.
• Push the frontier on offensive and defensive AI for SAP, leading research and shaping it into product.
• Represent Nova on security in the SAP community, writing, speaking, and publishing.

📌 Required Qualifications

• Deep, hands-on security experience — application security, cloud security (AWS in particular), identity and access management.
• Architectural intuition to spot a privilege escalation path.
• Think adversarially by default, whether from offensive or defensive engineering backgrounds.
• Informed opinions on AI security: prompt injection, agent action boundaries, tool-use vulnerabilities, sandbox escape.
• Fluent in compliance frameworks (SOC 2, ISO 27001, GDPR, CCPA).
• Communicate clearly with both engineers and executives.
• Track record of public technical output — writing, talks, CVEs, open-source contributions.

⭐ Desirable Experience

• 5+ years of security engineering, security architecture, or offensive security work.
• Hands-on AWS security depth (IAM, KMS, networking, multi-account architectures).
• Designing or hardening multi-tenant SaaS platforms in enterprise contexts.
• Leading SOC 2 Type II, ISO 27001, or comparable certification efforts.
• Familiarity with SAP, ABAP, or enterprise application security generally.
• Working directly with enterprise customer security teams (CISOs, DPOs, security architects).

🎁 Benefits

Competitive compensation, meaningful equity, and full health, dental, and vision coverage.

🛂 Visa & Eligibility

No specific visa or eligibility information provided.