Python Developer

Overview PepsiCo is a global leader in food and beverage, with iconic brands like Pepsi, Gatorade, and Quaker. We invite you to join our Cyber Fusion Center as a Senior Information Security Analyst – Emerging Technologies Security where you will help build and operationalize security solutions for containers, APIs, and AI/ML. Responsibilities Develop, optimize, and scale automation scripts (Python, PowerShell, Bash) to improve vulnerability detection, tracking, and remediation. Design custom API integrations between container/API scanning tools, ServiceNow VR & CC, and ITSM platforms to automate security workflows. Implement security automation playbooks that reduce manual efforts and accelerate response times. Build security solutions leveraging COTS tools to streamline vulnerability scanning and compliance reporting. Implement automated risk‑based vulnerability prioritization models, leveraging AI/ML‑driven insights where applicable. Leverage and optimize the ServiceNow VR module for scalable vulnerability tracking, exception management, and automated ticketing. Work closely with IT and business stakeholders to define remediation SLAs, risk thresholds, and compliance requirements. Lead the security assessment of container/API environments, ensuring compliance with industry standards and best practices. Automate the ingestion of container/API vulnerability findings into ServiceNow VR for enhanced tracking and resolution. Ensure that security data is accurate, actionable, and seamlessly integrated with ITSM and GRC platforms. Apply expert‑level knowledge of networking and security protocols (e.g., TCP/IP, HTTP/S, SSH, FTP, DNS, SSL/TLS, VPNs, RDP). Develop tools to generate automated compliance reports, track remediation progress, and reduce audit preparation time. Stay ahead of emerging threats, regulatory and vulnerability trends, continuously refining security automation strategies. Conduct technical design reviews, evaluate security tools, and lead/participate in discussions to improve tool effectiveness. Provide technical expertise in vulnerability management, container/API security, and security automation. Define and track KPIs to gauge security effectiveness and direct continuous improvement efforts. Mentor junior and mid‑level security analysts, sharing best practices in automation, API development, and risk prioritization. Develop comprehensive security documentation, playbooks, and process improvements. Accountabilities Execute on projects, objectives, and deliverables in alignment with team vision, mission, and goals. Routinely develop and update security documentation, processes, and technologies to adapt to an emerging threat landscape. Develop automation to scale global resilient security capabilities. Collaborate with partner teams, service owners, and senior leadership to influence, prioritize, and drive the resolution of discovered security findings. Participate in security reviews, audits, on‑site engagements, and support incidents after‑hours when required. Qualifications Education & Experience Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field (or equivalent hands‑on experience). 3 to 4 years of experience in cybersecurity, vulnerability management, software development, and security automation. Mandatory Technical Skills Strong programming skills in Python, PowerShell, Bash, or equivalent languages for security automation. Knowledge of the vulnerability management life cycle. Proficiency in IaC security (Terraform, CloudFormation), container security (Kubernetes, Docker), and serverless environment security. Experience with runtime security (linux/windows – VM, containers, serverless) and eBPF‑based security monitoring for detecting and mitigating threats. Excellent technical cybersecurity and engineering/development skills, with experience using APIs to integrate disparate security technologies and platforms (ex: Tenable, Synk, AquaSec, Onapsis, ServiceNow, ITSM). Familiarity with networking configurations, routing, firewalling; DevOps ecosystem: CI/CD tools, orchestration tools; cloud computing environments (AWS, Azure, Google Cloud). Experience with cloud security automation (AWS, Azure, GCP). Proven ability to lead security automation initiatives and mentor junior analysts. Strong analytical, troubleshooting, and problem‑solving skills. Non‑Technical Skills Strong communication skills, both verbal and written. A proactive and positive team player who is impact‑focused, driven, curious, analytical, and a self‑starter. High level of integrity and ethical standards. Excellent problem‑solving skills, with a focus on long‑term system sustainability. Ability to establish trust relationships and influence others to positively impact the security posture and the business. Operates extremely well under pressure, balancing multiple priorities in a fast‑paced environment. Differentiating Behaviors Focus on scalable security solutions rather than individual tool deployments. Use automation and data‑driven decision‑making to improve security tooling. Proactively eliminate security bottlenecks in development workflows. Ensure security signals are high‑fidelity, prioritized, and developer‑friendly. Weigh the relative costs/benefits/trade‑offs of potential actions and identify the best resolution. Organize tasks, manage time, and prioritize actions to meet business needs. If this is an opportunity that interests you, we encourage you to apply even if you do not meet 100% of the requirements. Benefits Opportunities to learn and develop through a variety of internal programs and external providers. Internal digital platforms for self‑learning. Leadership development programs. Specialized training tailored to the role. Recognition programs for seniority, behavior, leadership, and milestones. Financial wellness programs to support life‑stage goals. Flexibility programs that allow you to balance personal and work life. Family benefits such as wellness lines, discounts, scholarship programs for children, and aid plans for various life moments. We are an equal opportunity employer and value diversity at PepsiCo. We do not discriminate based on race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. We respect and value diversity as a workforce and innovation for the organization. #J-18808-Ljbffr