Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 167 days ago

Senior Security Engineer

Nova Intelligence10 open roles

Pay
$150,000 – $250,000 a year
Where
New York
Work mode
Remote
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSenior Security EngineerNova Intelligence · New York

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Nova Intelligence's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

10.5% of postings close within 7 days. Measured by our own scanner across the market.

Share of postings closed within
  1. 2.1%1 day
  2. 4.3%3 days
  3. 10.5%7 days
  4. 15.9%14 days
  5. 34.1%30 days
This job: posted 167 days ago

The posting

Nova Intelligence is building the most powerful AI platform for SAP teams. SAP is the heart of the enterprise: almost every critical business process at the world's largest companies — finance, supply chain, manufacturing, sales — runs on SAP. Our customers use Nova to 3x the productivity of their SAP teams: modernizing legacy code, redesigning business processes, resolving production issues, and more.

Nova Intelligence was founded by AI researchers, repeat entrepreneurs, and the co-inventor of SAP HANA, and has raised $40M from SAP.io http://SAP.io, Accel, Conviction, and Chemistry.

Check out the Launch Video https://player.mux.com/Ji004bNMQjBGUJvK5R4Yet6VTE9yASS6qQVLBwuB9ETI?amp%3Bmetadata-video-title=Nova+-+AI+Platform+for+SAP+Custom+Code&amp%3Bprimary-color=%23ffffff%29&amp%3Bvideo-title=Nova+-+AI+Platform+for+SAP+Custom+Code&poster=https%3A%2F%2Fimage.mux.com%2FJi004bNMQjBGUJvK5R4Yet6VTE9yASS6qQVLBwuB9ETI%2Fthumbnail.jpg%3Ftime%3D26%26width%3D1280%26height%3D720%26fit_mode%3Dcrop

ABOUT THIS ROLE

We're hiring Senior Security Engineers to design, harden, and continuously test the security of the Nova platform. Our mission is to build the most powerful AI platform for SAP — and that includes being the most secure. Nova operates inside the systems that run global business, with broad access and powerful capabilities; the security work is technically deep and central to the product.

WHAT YOU'LL DO

Own platform security architecture. You'll harden the security model of the platform across cloud and (in the future) on-prem deployments — isolation between customers and environments, identity and access policy, secrets and key management, and network controls. You'll work on real problems like preventing cross-service privilege paths, evolving customer-side audit access, maintaining tight scoping of admin credentials, and ensuring the agent's execution sandboxes can run untrusted code safely.

Lead our internal red team. You'll lead and extend our red team work — probing access controls and privilege boundaries, testing agent action boundaries (prompt injection, tool-use abuse, sandbox escape), validating tenant isolation under realistic attack patterns, and stress-testing our auth flows under adversarial pressure.

Solve hard auth and identity problems in SAP. SAP's identity model is idiosyncratic and the customer landscape is complex: federated SSO via IAS or other IdPs, SAML and OAuth flows across multiple systems, RFC connections, technical users, and a long tail of legacy auth patterns. You'll own how identity propagates from the customer's IdP through Nova into their SAP systems.

Raise our internal security baseline. SSO, deployment pipelines, secrets in CI/CD, code review controls, vendor onboarding, internal access. You'll set the standards, drive the implementation, and lead Nova's adherence to the compliance frameworks customers expect (SOC 2, ISO 27001, GDPR, CCPA). We treat these as the floor, not the ceiling.

Partner with customer security teams. Our enterprise customers run some of the most sophisticated security organizations in the world. You'll be the technical voice in the room with their CISOs, security architects, and DPOs — translating their requirements into platform changes and Nova's design into language their teams can defend internally.

Push the frontier on offensive and defensive AI for SAP. AI agents are uniquely powerful for security work in SAP — finding vulnerabilities in custom ABAP, auditing access patterns, identifying privilege escalation paths in customer landscapes. We use Nova to help customers find weaknesses in their own systems, and we use Nova to study Nova. You'll lead this research and shape it into product.

Represent Nova on security in the SAP community. Write, speak, publish. Security at the AI-meets-SAP intersection is uncharted territory, and there's real work to do in defining the field.

WHAT WE'RE LOOKING FOR

- You have deep, hands-on security experience — application security, cloud security (AWS in particular), identity and access management, and the architectural intuition to spot a privilege escalation path two systems away.

- You think adversarially by default, whether your background is offensive (red team, pentest, vulnerability research) or defensive engineering at a place that took it seriously.

- You have informed opinions on AI security: prompt injection, agent action boundaries, tool-use vulnerabilities, sandbox escape, and what changes when agents have persistent infrastructure access.

- You're fluent in the compliance frameworks customers care about (SOC 2, ISO 27001, GDPR, CCPA) — not as the goal, but as a baseline you can drive efficiently before building well past it.

- You communicate clearly with both engineers and executives. Half this job is making security real with platform engineers; the other half is being credible to a CISO who needs to defend our platform internally.

- You have a track record of public technical output — writing, talks, CVEs, open-source contributions. (Strong plus, not required.)

BACKGROUND WE'D LOVE TO SEE (NONE REQUIRED)

- 5+ years of security engineering, security architecture, or offensive security work

- Hands-on AWS security depth (IAM, KMS, networking, multi-account architectures)

- Designing or hardening multi-tenant SaaS platforms in enterprise contexts

- Leading SOC 2 Type II, ISO 27001, or comparable certification efforts

- Familiarity with SAP, ABAP, or enterprise application security generally

- Working directly with enterprise customer security teams (CISOs, DPOs, security architects)

WHY JOIN

You'll work alongside top engineers, AI researchers, and SAP experts on security problems few teams get to touch. What you build protects systems that run inside the world's largest enterprises — and shapes what AI-native security looks like for mission-critical environments as the field matures.

We use Nova to build Nova, and you'll use Nova to attack Nova. You'll be a power user of your own tools, obsessed with finding what breaks before anyone else does.

We're a small, highly talent-dense team. We offer competitive compensation, meaningful equity, and full health, dental, and vision coverage.

If you read this and recognize the role you want, apply — even if you don't match every line.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Nova Intelligence's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Nova Intelligence's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Nova Intelligence's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.