Senior Information Security Analyst

OverviewPepsiCo's Global Emerging Technologies Security Team is responsible for operationalizing API and web application security using the ImpervaSolutions, which turns discovery and visibility into continuous, measurable risk reduction through discovery, vulnerability identification, prioritization, mitigation, and escalation.Within the Cyber Fusion Center, we are looking for a Senior Information Security Analyst with 6 to 7 years of experience operating Imperva Solutions, vulnerability management, automation development, and enterprise security operations. This role requires advanced scripting skills (Python, PowerShell, Bash) to build automation frameworks that integrate Imperva with ServiceNow, SIEM/SOAR platforms (e.g., Splunk,Tines, Torq), and ITSM, optimizing risk remediation workflows.As a seasoned professional, you will lead strategic security initiatives to operationalize API and web application protection (discovery, classification, tuning, and inline mitigation) using Imperva, design scalable integration architectures, evaluate COTS product enhancements, participate in stakeholder/customer reviews, and mentor junior analysts on the platform's daily operations.ResponsibilitiesOperate, monitor, and continuously improve the enterprise Imperva WAF and API Security (WAAP) service end to end, including configuration, maintenance, health checks, and lifecycle activities across APIs and web applications, acting as the organization's technical SME for the platform.Administer the Imperva management console (Cloud Console and/or on-prem MX): user/role management, site and gateway onboarding, license management, and health/performance monitoring of nodes and gateways.Manage the platform's lifecycle: apply patches, version upgrades, and gateway updates (on-prem and cloud), validating stability and policy integrity post-change.Monitor service capacity and performance (latency impact, throughput, node utilization) to ensure the WAAP layer does not degrade application performance.Execute all production policy and configuration changes through a formal Change Management (CAB) process, documenting change requests, rollback plans, and post-change validation.Execute Imperva's Discover Assess Mitigate process: continuous discovery of REST, GraphQL, gRPC, and SOAP endpoints including shadow APIs, unmanaged endpoints, and "zombie" APIs, as well as onboarding/offboarding of web applications, classifying both by data sensitivity (PII, PHI, PCI, financial) and business criticality.Design, implement, and tune Imperva security policies, profiles, and rules: blocking adjusting signatures, exceptions, allowlisting, rate limiting, bot score, and geo-controls to minimize false positives.Analyze Imperva traffic and logs to identify abuse patterns, bot attacks, scraping, anomalies, and application-layer attacks (SQLi, XSS, DDoS); apply inline, client-session-level actions to stop abuse without coarse IP-level blocking.Support onboarding applications and APIs into the Imperva environment: requirements gathering, architecture and exposure review, DNS/SSL-TLS certificate validation, and cutover coordination; manage certificate renewals and IP/URL/country blocking.Automate ingestion of Imperva findings (API and WAF) into ServiceNow VR, integrating with SOAR platforms (e.g., Tines, Torq) to automate ticket creation, configuration validation, and response to low-risk incidents without manual intervention.Develop, optimize, and scale automation (Python, PowerShell, Bash) that integrates Imperva with ServiceNow VR & CC, SIEM/SOAR, and ITSM to reduce manual effort and accelerate response times.Design custom API integrations between Imperva, ServiceNow, and ITSM/SOAR platforms to automate security workflows.Embed API and web application security into CI/CD pipelines: schema validation, tests aligned to the OWASP API Top 10, Infrastructure-as-Code components (Terraform), and policy-as-code at pull-request time.Act as the L2/L3 escalation point for L1/SOC teams on Imperva-related events and incidents, validating triage, guiding lower-level engineers, and maintaining runbooks and knowledge articles.Apply expert knowledge of networking and security protocols (TCP/IP, SSH, FTP, DNS, SSL/TLS, VPNs, RDP) for troubleshooting incidents across layers 3, 4, and 7, including DoS/DDoS attacks, brute force, and application vectors (XSS, SQLi, RCE).Define and track operational security KPIs blocked events, top attacks/attackers, false positive (FP) rate, mean time to remediation (MTTR), exposed/unmanaged endpoints, protection coverage, and inline action rate and produce periodic (weekly/monthly) reports for stakeholders and leadership.Manage AI Protection solutions (AI Prompt Jailbreak defense, AI Model protection) and DLP technologies including CASB SaaS and Email Security SaaS.Collaborate with product, DevOps, and support teams to investigate root cause of false positive/negative cases and implement corresponding changes to Imperva policies.Participate in recurring reviews with internal customers and business stakeholders ("customer/business review calls") to communicate risk posture, attack trends, and remediation status.Lead technical design reviews, evaluate security tools, and drive architectural discussions to improve the effectiveness of Imperva and complementary tools.Provide technical leadership in API security, WAF, container security, and security automation, mentoring junior and mid-level analysts on best practices for Imperva operations, API development, and risk prioritization.Develop security documentation, playbooks, SOPs, and network diagrams related to the day-to-day operation of Imperva.Stay current on emerging API and web application threats, regulatory changes, and vulnerability trends, continuously refining security automation strategies.AccountabilitiesExecute on projects, objectives, and deliverables in alignment with team vision, mission, and goals.Act as the organization's Imperva SME (Subject Matter Expert), serving as the technical point of reference for business, IT, and senior leadership.Routinely develop and update Imperva Solutions documentation, processes, and configurations to adapt to the evolving threat landscape.Develop automation to scale global, resilient API and web application security capabilities.Collaborate with partner teams, service owners, and senior leadership to influence, prioritize, and drive resolution of security findings discovered by Imperva.Participate in security reviews, audits, VAPT findings, on-site engagements, and support incidents after-hours when required, including periodic on-call rotations.Differentiating Behaviors:Focuses on scalable API and web application security solutions rather than isolated tool deployments.Uses automation, SOAR integration, and data-driven decision-making (MTTR, FP rate, protection coverage, inline action rate KPIs) to improve Imperva operations.Proactively eliminates security bottlenecks in development workflows.Ensures security signals generated by Imperva are high-fidelity, prioritized, and developer-friendly.Weighs the relative costs/benefits/trade-offs when tuning inline mitigation and WAF policies, applying the staged enforcement model before blocking legitimate traffic.Demonstrates leadership by driving innovation in API and web application security, defining best practices, acting as the go-to SME, and shaping the security culture.Compensation and Benefits:The expected compensation range for this position is between $93,500 - $156,450.Location, confirmed job-related skills, experience, and education will be considered in setting actual starting salary. Your recruiter can share more about the specific salary range during the hiring process.Bonus based on performance and eligibility target payout is 10% of annual salary paid out annually.Paid time off subject to eligibility, including paid parental leave, vacation, sick, and bereavement.In addition to salary, PepsiCo offers a comprehensive benefits package to support our employees and their families, subject to elections and eligibility: Medical, Dental, Vision, Disability, Health, and Dependent Care Reimbursement Accounts, Employee Assistance Program (EAP), Insurance (Accident, Group Legal, Life), Defined Contribution Retirement Plan.QualificationsEducation & Years of experienceBachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field (or equivalent hands-on experience).6 to 7 years of experience in cybersecurity, operating application/API protection (WAAP) platforms, vulnerability management, and security automation.Mandatory Technical SkillsHands-on experience operating Imperva Solutions (Cloud and/or On-Prem), including console/gateway administration, learning mode, application profiling, virtual patching, and version/patch lifecycle management.Strong programming/scripting skills in Python, PowerShell, Bash, or equivalent for API and WAF security automation.Expert knowledge of networking and security protocols: TCP/IP, DNS, SSL/TLS, SSH, FTP, VPNs, RDP, routing, and firewalling.Proficiency in Infrastructure as Code (Terraform, CloudFormation), CI/CD pipelines, container security (Kubernetes, Docker).Deep knowledge of API and web security: OWASP API Top 10, endpoint authentication (tokens, OAuth), REST/GraphQL/gRPC/SOAP schemas, and session-level bot/scraping/DDoS mitigation.Experience tuning security policies for false-positive management: signatures, exceptions, allowlisting, rate limiting, bot scoring, and geo-controls.Excellent technical cybersecurity and engineering/development skills, with experience using APIs to integrate Imperva with ServiceNow and SOAR platforms.Familiarity or hands-on experience with cloud computing environments (AWS, Azure, and Google Cloud).Working knowledge of SQL and data visualization tools (Power BI, Tableau, Looker) for risk reporting and KPI tracking (FP rate, MTTR, top attacks).Proven ability to lead security automation initiatives and mentor junior analysts.Strong analytical, troubleshooting, and problem-solving skills.Non-technical SkillsProactive and positive team player who is impact-focused, driven, curious, analytical, and a self-starter.High level of integrity and ethical standards.Excellent problem-solving skills, with a focus on long-term system sustainability.Ability to establish trust relationships and influence others to positively impact the business's security posture.Solid customer orientation with excellent oral and written communication skills in English, including the ability to present findings and trends in stakeholder business reviews.Operates extremely well under pressure, balancing multiple operational priorities in a fast-paced environment (includes availability for on-call rotations).Job SummaryReq ID: View phone number on click.appcast.io# of Openings: 1Job Function: ITRelocation: No