Security & QA Analyst (Cloud Application Log Source)

Role: Security & QA Analyst (Cloud Application Log Sources)

Experience: 4 to 7 Years

Location: Pune | Hybrid

Notice Period: 0 to 30 Days

We are looking for a Security & QA Analyst to discover authentication configuration and usage across the customer's SAP cloud application estate including Signavio, Ariba, BTP and Commerce Cloud where credentials and log sources differ from system to system.

Key Responsibilities:

• Discover authentication configuration across SAP cloud applications through administration consoles, configuration exports and APIs.
• Extract and analyse available audit and access logs from each cloud application to identify Basic Authentication and static-credential usage.
• Identify integration users, API clients and stored credentials configured in each application, and map them to the systems they call.
• Assess what logging and retention each platform offers, and identify where evidence for attribution is not available.
• Contribute the cloud-application portion of the Non-Human Identity inventory and disposition against the pattern catalogue.
• Support attribution by identifying the owning tenant, subaccount, workspace or configuration item for each credential.
• Support QA validation of migrated cloud application connections.

Required Skills:

• Hands-on experience administering or securing SAP cloud applications such as Signavio, Ariba, BTP or Commerce Cloud.
• Experience working with platform administration APIs and configuration exports.
• Understanding of API authentication methods Basic Authentication, API keys, OAuth 2.0 client credentials, mTLS.
• Experience in log analysis and security validation across SaaS platforms.
• Understanding of Human and Non-Human Identities (NHI) and authentication controls.
• Ability to work independently across several platforms with differing tooling and terminology.