Senior Information Security Analyst

PepsiCo • Plano, TX

3d • $93,500 - $156,450

About The Position

PepsiCo’s Global Emerging Technologies Security Team, within the Cyber Fusion Center, is seeking a Senior Information Security Analyst to operationalize API and web application security using Imperva solutions. The role focuses on discovery, vulnerability identification, prioritization, mitigation, and escalation to achieve continuous, measurable risk reduction across APIs and web applications. The analyst will serve as the organization’s Imperva subject matter expert, lead platform operations and strategic security initiatives, build automation and integrations, and help improve enterprise security operations.

The position operates and improves Imperva WAF and API Security (WAAP) services across cloud and/or on-premises environments. It includes platform administration and lifecycle management, application and API discovery and onboarding, security policy design and tuning, traffic analysis, performance monitoring, and formal change management. The analyst will also integrate Imperva with ServiceNow, SIEM/SOAR, and ITSM platforms; embed security controls into CI/CD workflows; support incident escalation and reporting; and collaborate with stakeholders, development teams, and service owners.

The role provides technical leadership in API security, WAF, container security, and automation, including mentoring junior and mid-level analysts. It also involves maintaining operational documentation and playbooks, participating in stakeholder reviews and security assessments, keeping current with emerging threats, and supporting incidents after hours when required, including periodic on-call rotations.

Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field, or equivalent hands-on experience.
• 6 to 7 years of cybersecurity experience operating application/API protection (WAAP) platforms, vulnerability management, and security automation.
• Hands-on experience operating Imperva solutions in cloud and/or on-premises environments, including console and gateway administration, learning mode, application profiling, virtual patching, and version and patch lifecycle management.
• Strong programming and scripting skills in Python, PowerShell, Bash, or equivalent for API and WAF security automation.
• Expert knowledge of TCP/IP, HTTP/S, DNS, SSL/TLS, SSH, FTP, VPNs, RDP, routing, and firewalling.
• Proficiency with infrastructure as code, including Terraform or CloudFormation, CI/CD pipelines, and container security with Kubernetes and Docker.
• Deep knowledge of API and web security, including OWASP API Top 10, token and OAuth authentication, REST/GraphQL/gRPC/SOAP schemas, and session-level bot, scraping, and DDoS mitigation.
• Experience tuning security policies to manage false positives, including signatures, exceptions, allowlisting, rate limiting, bot scoring, and geographic controls.
• Cybersecurity engineering and development skills, including experience using APIs to integrate Imperva with ServiceNow and SOAR platforms.
• Familiarity or hands-on experience with AWS, Azure, and Google Cloud environments.
• Working knowledge of SQL and data visualization tools such as Power BI, Tableau, or Looker for risk reporting and KPI tracking.
• Proven ability to lead security automation initiatives and mentor junior analysts.
• Strong analytical, troubleshooting, and problem-solving skills, with a focus on sustainable systems.
• Proactive, positive, impact-focused, curious, analytical, self-starting team player with high integrity and ethical standards.
• Ability to establish trust and influence others to improve the business’s security posture.
• Customer-oriented with excellent written and oral English communication skills, including presenting findings and trends in stakeholder business reviews.
• Ability to work under pressure, balance multiple operational priorities in a fast-paced environment, and be available for on-call rotations.

Responsibilities

• Operate, monitor, administer, and continuously improve enterprise Imperva WAF and API Security (WAAP) services, including configuration, maintenance, health checks, and lifecycle activities.
• Administer Imperva Cloud Console and/or on-premises management consoles, including user and role management, site and gateway onboarding, license management, and node and gateway health monitoring.
• Manage platform patches, version upgrades, and gateway updates, and validate stability and policy integrity after changes.
• Monitor service capacity and performance, including latency, throughput, and node utilization, to avoid degrading application performance.
• Process production policy and configuration changes through the formal Change Management (CAB) process, documenting change requests, rollback plans, and post-change validation.
• Execute Imperva’s Discover, Assess, and Mitigate process, including continuous discovery of REST, GraphQL, gRPC, and SOAP endpoints, shadow APIs, unmanaged endpoints, and zombie APIs.
• Onboard and offboard web applications and APIs, classifying them by data sensitivity and business criticality.
• Design, implement, and tune Imperva security policies, profiles, and rules, including signatures, exceptions, allowlisting, rate limiting, bot scoring, and geographic controls, to minimize false positives.
• Analyze Imperva traffic and logs for abuse patterns, bot attacks, scraping, anomalies, and application-layer attacks such as SQL injection, cross-site scripting, and DDoS; apply appropriate inline and client-session-level mitigations.
• Support application and API onboarding through requirements gathering, architecture and exposure review, DNS and SSL/TLS certificate validation, and cutover coordination; manage certificate renewals and IP, URL, and country blocking.
• Automate ingestion of Imperva API and WAF findings into ServiceNow VR and integrate with SOAR platforms to automate ticket creation, configuration validation, and responses to low-risk incidents.
• Develop and scale Python, PowerShell, and Bash automation integrating Imperva with ServiceNow VR and CC, SIEM/SOAR, and ITSM platforms.
• Design custom API integrations between Imperva, ServiceNow, and ITSM/SOAR platforms to automate security workflows.
• Embed API and web application security in CI/CD pipelines through schema validation, OWASP API Top 10-aligned tests, Terraform infrastructure-as-code components, and policy-as-code at pull-request time.
• Serve as an L2/L3 escalation point for L1 and SOC teams on Imperva events and incidents, validate triage, guide engineers, and maintain runbooks and knowledge articles.
• Troubleshoot incidents across network layers using knowledge of networking and security protocols, including attacks such as DoS/DDoS, brute force, XSS, SQL injection, and RCE.
• Define and track operational security KPIs, including blocked events, attacks and attackers, false-positive rate, MTTR, exposed or unmanaged endpoints, protection coverage, and inline action rate; produce periodic stakeholder and leadership reports.
• Manage AI Protection solutions, including AI Prompt Jailbreak defense and AI Model protection, and DLP technologies including CASB SaaS and Email Security SaaS.
• Collaborate with product, DevOps, and support teams to investigate false-positive and false-negative cases and implement corresponding Imperva policy changes.
• Participate in recurring customer and business stakeholder reviews, communicating risk posture, attack trends, and remediation status.
• Lead technical design reviews, evaluate security tools, and drive architectural discussions to improve Imperva and complementary tools.
• Provide technical leadership in API security, WAF, container security, and security automation, mentoring junior and mid-level analysts.
• Develop and maintain security documentation, playbooks, SOPs, and network diagrams for Imperva operations.
• Stay current on API and web application threats, regulatory changes, and vulnerability trends, and refine security automation strategies.
• Deliver projects and objectives aligned with team goals; serve as the Imperva SME and technical reference for business, IT, and senior leadership.
• Collaborate with partner teams, service owners, and senior leadership to influence priorities and drive resolution of Imperva findings.
• Participate in security reviews, audits, VAPT findings, and on-site engagements, and support after-hours incidents when required, including periodic on-call rotations.

Benefits

• Performance-based bonus with a 10% annual salary target payout, paid annually, subject to eligibility.
• Paid time off subject to eligibility, including paid parental leave, vacation, sick, and bereavement leave.
• Medical, dental, vision, and disability benefits, subject to elections and eligibility.
• Health and dependent care reimbursement accounts, subject to elections and eligibility.
• Employee Assistance Program (EAP).
• Accident, group legal, and life insurance, subject to elections and eligibility.
• Defined Contribution Retirement Plan.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior