Senior Information Security Analyst

The Senior Information Security Analyst role sits within PepsiCo’s Global Emerging Technologies Security Team inside the Cyber Fusion Center, focused on operationalizing API and web application protection using ImpervaSolutions. This position operates and advances the Imperva WAF and WAAP capabilities, builds automation integrations, and supports enterprise vulnerability and security operations workflows.

Role Overview

As the Imperva SME for the organization, you will translate discovery and visibility into continuous, measurable risk reduction. The work spans end-to-end WAAP operations, security policy tuning, endpoint discovery and classification, and escalations for API and web application security incidents.

Key Responsibilities

• Operate, monitor, and continuously improve the enterprise Imperva WAAP service for APIs and web applications, including configuration, maintenance, health checks, and lifecycle activities, serving as the technical SME for the platform.
• Administer the Imperva management console (Cloud Console and/or on-prem MX) including user and role management, site and gateway onboarding, license management, and health/performance monitoring of nodes and gateways.
• Manage platform lifecycle activities such as patches, version upgrades, and gateway updates across on-prem and cloud, validating stability and policy integrity after changes.
• Monitor service capacity and performance to ensure the WAAP layer does not degrade application performance, including latency impact, throughput, and node utilization.
• Process production policy and configuration changes through formal Change Management (CAB), documenting change requests, rollback plans, and post-change validation.
• Execute Imperva’s Discover Assess Mitigate process, including continuous discovery of REST, GraphQL, gRPC, and SOAP endpoints (including shadow APIs, unmanaged endpoints, and “zombie” APIs), and onboarding/offboarding web applications while classifying by data sensitivity (PII, PHI, PCI, financial) and business criticality.
• Design, implement, and tune security policies, profiles, and rules, including blocking signatures, exceptions, allowlisting, rate limiting, bot score, and geo-controls to reduce false positives.
• Analyze Imperva traffic and logs to detect abuse patterns, bot attacks, scraping, anomalies, and application-layer attacks (including SQLi, XSS, and DDoS), applying inline and client-session-level actions to stop abuse without coarse IP blocking.
• Support onboarding of applications and APIs, including requirements gathering, architecture and exposure review, DNS/SSL-TLS certificate validation, cutover coordination, certificate renewal management, and IP/URL/country blocking.
• Automate ingestion of Imperva findings into ServiceNow VR, integrating with SOAR platforms such as Tines and Torq to automate ticket creation, configuration validation, and responses to low-risk incidents without manual intervention.
• Develop, optimize, and scale automation using Python, PowerShell, and Bash to integrate Imperva with ServiceNow VR & CC, SIEM/SOAR, and ITSM to reduce manual effort and speed up response times.
• Design custom API integrations between Imperva, ServiceNow, and ITSM/SOAR platforms to automate security workflows.
• Embed API and web application security into CI/CD pipelines through schema validation, tests aligned to the OWASP API Top 10, Terraform Infrastructure-as-Code components, and policy-as-code at pull-request time.
• Serve as an L2/L3 escalation point for L1/SOC teams on Imperva events and incidents, validating triage, guiding lower-level engineers, and maintaining runbooks and knowledge articles.
• Use advanced knowledge of networking and security protocols (TCP/IP, HTTP/S, SSH, FTP, DNS, SSL/TLS, VPNs, RDP) to troubleshoot across layers 3, 4, and 7, including DoS/DDoS, brute force, and application vectors (XSS, SQLi, RCE).
• Define and track operational security KPIs such as blocked events, top attacks/attackers, false positive rate, MTTR, exposed/unmanaged endpoints, protection coverage, and inline action rate, and produce weekly/monthly reports for stakeholders and leadership.
• Manage AI Protection solutions (AI Prompt Jailbreak defense, AI Model protection) and DLP technologies including CASB SaaS and Email Security SaaS.
• Collaborate with product, DevOps, and support teams to investigate root causes of false positives/negatives and implement corresponding Imperva policy changes.
• Participate in recurring customer and business review calls to communicate risk posture, attack trends, and remediation status.
• Lead technical design reviews, evaluate security tools, and drive architectural discussions to improve the effectiveness of Imperva and complementary tools.
• Provide technical leadership in API security, WAF, container security, and security automation, mentoring junior and mid-level analysts on best practices for Imperva operations, API development, and risk prioritization.
• Develop security documentation, playbooks, SOPs, and network diagrams for day-to-day Imperva operation.
• Stay current on emerging API and web application threats, regulatory changes, and vulnerability trends to continuously refine security automation strategies.

Required Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field (or equivalent hands-on experience).
• 6 to 7 years of experience in cybersecurity, including operation of application/API protection (WAAP) platforms, vulnerability management, and security automation.
• Hands-on experience operating Imperva Solutions (Cloud and/or On-Prem), including console/gateway administration, learning mode, application profiling, virtual patching, and version/patch lifecycle management.
• Strong programming and scripting skills in Python, PowerShell, Bash, or equivalent for API and WAF security automation.
• Expert knowledge of networking and security protocols: TCP/IP, HTTP/S, DNS, SSL/TLS, SSH, FTP, VPNs, RDP, routing, and firewalling.
• Proficiency with Infrastructure as Code and deployment workflows including Terraform, CloudFormation, CI/CD pipelines, and container security (Kubernetes, Docker).
• Deep knowledge of API and web security including OWASP API Top 10, endpoint authentication (tokens, OAuth), REST/GraphQL/gRPC/SOAP schemas, and session-level bot/scraping/DDoS mitigation.
• Experience tuning security policies to manage false positives using signatures, exceptions, allowlisting, rate limiting, bot scoring, and geo-controls.
• Experience using APIs to integrate Imperva with ServiceNow and SOAR platforms.
• Familiarity or hands-on experience with cloud environments (AWS, Azure, and Google Cloud).
• Working knowledge of SQL and data visualization tools including Power BI, Tableau, and Looker for risk reporting and KPI tracking.
• Proven ability to lead security automation initiatives and mentor junior analysts.
• Strong analytical, troubleshooting, and problem-solving skills.
• High integrity and ethical standards, with ability to establish trust and influence others to improve security posture.
• Strong English oral and written communication skills for presenting findings and trends in stakeholder business reviews.
• Ability to work effectively under pressure, including availability for on-call rotations.

Technologies

• ImpervaSolutions, Imperva WAF, Imperva API Security (WAAP), Imperva management console, Cloud Console, on-prem MX
• Imperva Discover Assess Mitigate
• ServiceNow, ServiceNow VR, ServiceNow VR & CC, SIEM, SOAR
• Splunk, Tines, Torq, ITSM
• Python, PowerShell, Bash, Terraform, CloudFormation, CI/CD pipelines
• OWASP API Top 10, Kubernetes, Docker
• SQL, Power BI, Tableau, Looker
• AWS, Azure, Google Cloud
• TCP/IP, HTTP/S, DNS, SSL/TLS, SSH, FTP, VPNs, RDP
• REST, GraphQL, gRPC, SOAP, OAuth
• CASB SaaS, Email Security SaaS

Location and Compensation

• Location: Plano, TX (onsite)
• Compensation: USD 93,500 to 156,450 per year
• Bonus: Performance-based, eligibility target payout of 10% of annual salary paid annually

Benefits

• Paid time off subject to eligibility, including paid parental leave, vacation, sick, and bereavement
• Medical, Dental, Vision, Disability, Health
• Dependent Care Reimbursement Accounts
• Employee Assistance Program (EAP)
• Insurance (Accident, Group Legal, Life)
• Defined Contribution Retirement Plan