Job Description

PepsiCo’s Global Emerging Technologies Security Team is responsible for building and operationalizing security solutions in emerging technology areas like containers, Data Security, API, AI/ML. Our mission is to effectively and efficiently make security risks visible to the business and actionable by them.

Within the Cyber Fusion Center, the Emerging Technologies Security Team is looking for an experienced and highly technical Senior Information Security Analyst with 6 to 7 years of expertise in Vulnerability Management, Software Development, Security Automation, and Enterprise Security Operations. This role demands advanced coding skills (Python, PowerShell, Bash, or equivalent) to develop automation frameworks that integrates security tools and optimizes vulnerability remediation workflows.

As a seasoned professional, you will lead strategic security initiatives for building and operationalizing security solutions in emerging technology areas like containers, API, AI/ML. You will design scalable security architectures and solutions, review and suggest COTS products, and mentor junior analysts.

Responsibilities

• Develop, optimize, and scale automation scripts (Python, PowerShell, Bash) to improve vulnerability detection, tracking, and remediation.
• Design custom API integrations between container/API scanning tools, ServiceNow VR & CC, and ITSM platforms to automate security workflows.
• Implement security automation playbooks that reduce manual efforts and accelerate response times.
• Build security solutions leveraging COTS tools to streamline vulnerability scanning and compliance reporting.
• Implement automated risk-based vulnerability prioritization models, leveraging AI/ML-driven insights where applicable.
• Leverage and optimize the ServiceNow VR module for scalable vulnerability tracking, exception management, and automated ticketing.
• Work closely with IT and business stakeholders to define remediation SLAs, risk thresholds, and compliance requirements.
• Lead the security assessment of container/API environments, ensuring compliance with industry standards and best practices.
• Automate the ingestion of container/API vulnerability findings into ServiceNow VR for enhanced tracking and resolution.
• Ensure that security data is accurate, actionable, and seamlessly integrated with ITSM and GRC platforms.
• Apply expert-level knowledge of networking and security protocols (e.g., TCP/IP, HTTP/S, SSH, FTP, DNS, SSL/TLS, VPNs, RDP).
• Develop tools to generate automated compliance reports, track remediation progress, and reduce audit preparation time.
• Stay ahead of emerging threats, regulatory changes, and vulnerability trends, continuously refining security automation strategies.
• Conduct technical design reviews, evaluate security tools, and lead architectural discussions to improve tool effectiveness.
• Provide technical leadership in vulnerability management, container/API security, and security automation.
• Define and track KPIs to gauge security effectiveness and direct continuous improvement efforts.
• Mentor junior and mid-level security analysts, sharing best practices in automation, API development, and risk prioritization.
• Develop comprehensive security documentation, playbooks, and process improvements.

Compensation and Benefits:

• The expected compensation range for this position is between $93,500 - $156,450.
• Location, confirmed job-related skills, experience, and education will be considered in setting actual starting salary. Your recruiter can share more about the specific salary range during the hiring process.
• Bonus based on performance and eligibility target payout is 10% of annual salary paid out annually.
• Paid time off subject to eligibility, including paid parental leave, vacation, sick, and bereavement.
• In addition to salary, PepsiCo offers a comprehensive benefits package to support our employees and their families, subject to elections and eligibility: Medical, Dental, Vision, Disability, Health, and Dependent Care Reimbursement Accounts, Employee Assistance Program (EAP), Insurance (Accident, Group Legal, Life), Defined Contribution Retirement Plan.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field (or equivalent hands-on experience).
• 6 to 7 years of experience in cybersecurity, vulnerability management, software development and security automation.

>

Our Company will consider for employment qualified applicants with criminal histories in a manner consistent with the requirements of the Fair Credit Reporting Act, and all other applicable laws, including but not limited to, San Francisco Police Code Sections 4901-4919, commonly referred to as the San Francisco Fair Chance Ordinance; and Chapter XVII, Article 9 of the Los Angeles Municipal Code, commonly referred to as the Fair Chance Initiative for Hiring Ordinance. All qualified applicants will receive consideration for employment without regard to age, race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, or disability status. PepsiCo is an Equal Opportunity Employer: Female / Minority / Disability / Protected Veteran / Sexual Orientation / Gender Identity / Age If you'd like more information about your EEO rights as an applicant under the law, please download the available EEO is the Law & EEO is the Law Supplement documents. View PepsiCo EEO Policy Please view our Pay Transparency Statement