Senior SAP Security Analyst - Code & Vulnerability Governance

PepsiCo; Warszawa; Hybrid; PLN 208,000 - 254,000; Full time

Benefits offered by this job

Annual bonus 15%

Benefits package

Job summary

PepsiCo in Warsaw’s Cyber Fusion Center seeks a Senior Information Security Analyst specializing in SAP Application Security. You identify and track vulnerabilities in SAP ABAP code and SAP environments using Onapsis Assess for Code and Control for Code.

You’ll collaborate with SAP development, BASIS, and business teams to remediate issues and integrate findings into ServiceNow Vulnerability Response, driving risk reduction and secure software practices across SAP landscapes.

Qualifications

• Strong knowledge of SAP ABAP development.
• Experience with Onapsis Assess for Code and Control for Code.
• Knowledge of SAP authorization concepts and RBAC.
• Experience integrating security findings into ServiceNow Vulnerability Response.
• Understanding of secure coding principles and testing methodologies.
• Experience prioritizing application vulnerabilities.
• Experience with SAP S/4HANA transformations
• CI/CD integration and DevSecOps practices.
• OWASP Top 10 familiarity and secure development frameworks.

Responsibilities

• Perform security assessments of SAP custom code using Onapsis Assess for Code.
• Identify vulnerabilities, insecure coding patterns, authorization weaknesses, and configuration issues in SAP applications.
• Analyze ABAP source code for security risks including injections and data exposure.
• Validate findings and provide remediation guidance to SAP teams.
• Support SSDLC practices and establish secure coding standards for SAP ABAP.
• Partner with SAP developers to improve code quality and reduce security defects.
• Administer and maintain Onapsis Control for Code; configure automated policy checks.
• Integrate SAP code security findings into ServiceNow Vulnerability Response and ensure proper tracking.

Skills

SAP ABAP programming

Onapsis Assess for Code

Secure coding principles

Application security testing

Threat modeling

CI/CD / DevSecOps

OWASP Top 10

S/4HANA transformations

SAP S/4HANA security

Education

SAP Certified Associate – SAP System Security and Authorizations

SAP Certified Technology Associate – SAP S/4HANA System Administration

SAP BTP Security

CISSP

CISM

Tools

Onapsis Assess for Code

Control for Code

ServiceNow Vulnerability Response

Job description

PepsiCo in Warsaw’s Cyber Fusion Center seeks a Senior Information Security Analyst specializing in SAP Application Security. You identify and track vulnerabilities in SAP ABAP code and SAP environments using Onapsis Assess for Code and Control for Code.

You’ll collaborate with SAP development, BASIS, and business teams to remediate issues and integrate findings into ServiceNow Vulnerability Response, driving risk reduction and secure software practices across SAP landscapes.