Senior SAP Security Engineer — Code & Compliance

PepsiCo Deutschland GmbH; Warszawa; On-site; PLN 196,000 - 266,000; Full time

Benefits offered by this job

Annual bonus

Comprehensive benefits package

Job summary

PepsiCo Deutschland GmbH in Warszawa seeks a Senior Information Security Analyst specializing in SAP Application Security to identify and remediate vulnerabilities in SAP ABAP code and SAP environments using Onapsis Assess for Code and Control for Code.

You will partner with SAP development, BASIS and business teams to improve secure coding practices, align with SSDLC, and integrate findings into ServiceNow Vulnerability Response for tracking and reporting.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Software Engineering, or related field.
• 3–5 years of experience in SAP Security, SAP Development, Application Security, or Vulnerability Management.
• Experience working within SAP ECC, SAP S/4HANA, or SAP BTP environments.

Responsibilities

• Perform security assessments of SAP custom code using Onapsis Assess for Code.
• Identify vulnerabilities, insecure coding patterns, authorization weaknesses, and configuration issues within SAP applications.
• Analyze ABAP source code for security risks including injection vulnerabilities, authorization bypasses, insecure RFC calls, hardcoded credentials, and data exposure risks.
• Validate findings and provide remediation guidance to SAP development teams.
• Establish secure coding standards for SAP ABAP development.
• Partner with SAP developers to improve code quality and reduce security defects.
• Administer and maintain Onapsis Control for Code and configure automated policy checks.
• Integrate SAP code security findings into ServiceNow Vulnerability Response and track risk.
• Develop risk-based prioritization methodologies for SAP vulnerabilities.
• Support vulnerability lifecycle management from discovery through remediation validation.
• Develop executive and operational reporting for SAP application security risks.
• Track remediation progress and risk reduction initiatives.
• Produce metrics related to code quality, vulnerability trends and policy compliance.

Skills

SAP ABAP programming

Onapsis Assess for Code

ServiceNow Vulnerability Response

Vulnerability management

Threat modeling

CI/CD / DevSecOps

OWASP Top 10

Education

Bachelor's degree in Cybersecurity or related field

Tools

Onapsis Assess for Code

Control for Code

ServiceNow Vulnerability Response

Job description

PepsiCo Deutschland GmbH in Warszawa seeks a Senior Information Security Analyst specializing in SAP Application Security to identify and remediate vulnerabilities in SAP ABAP code and SAP environments using Onapsis Assess for Code and Control for Code.

You will partner with SAP development, BASIS and business teams to improve secure coding practices, align with SSDLC, and integrate findings into ServiceNow Vulnerability Response for tracking and reporting.