Senior SAP Security Analyst - Code & Risk (Hybrid)

PepsiCo; Warszawa; Hybrid; PLN 208,000 - 254,000; Full time

Benefits offered by this job

Annual bonus

Comprehensive benefits package

Job summary

PepsiCo is seeking a Senior Information Security Analyst specializing in SAP Application Security to identify, assess, and track security vulnerabilities in SAP ABAP projects using Onapsis Assess for Code and Control for Code.

You will collaborate with SAP development, BASIS, and business teams to remediate insecure coding practices, align with SSDLC, and drive risk-based prioritization for SAP applications across ECC, S/4HANA, and BTP environments.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Systems or related field.
• 3–5 years of experience in SAP Security, SAP Development, Application Security, or Vulnerability Management.
• Experience with SAP ECC, SAP S/4HANA, or SAP BTP environments.

Responsibilities

• Perform security assessments of SAP custom code using Onapsis Assess for Code.
• Identify vulnerabilities, insecure coding patterns, authorization weaknesses, and configuration issues within SAP applications.
• Analyze ABAP source code for security risks including injection vulnerabilities and data exposure risks.
• Validate findings and provide remediation guidance to SAP development teams.
• Integrate SAP findings into ServiceNow Vulnerability Response and track remediation.

Skills

SAP ABAP

Onapsis Assess for Code

ServiceNow Vulnerability Response

SAP S/4HANA

SAP ECC

Threat modeling

DevSecOps

OWASP Top 10

Education

Bachelor's degree in Cybersecurity or related field

Tools

Onapsis Assess

Control for Code

Job description

PepsiCo is seeking a Senior Information Security Analyst specializing in SAP Application Security to identify, assess, and track security vulnerabilities in SAP ABAP projects using Onapsis Assess for Code and Control for Code.

You will collaborate with SAP development, BASIS, and business teams to remediate insecure coding practices, align with SSDLC, and drive risk-based prioritization for SAP applications across ECC, S/4HANA, and BTP environments.