Senior Information Security Principal

PepsiCo; Plano (TX); On-site; USD 94,000 - 156,000; Full time

Benefits offered by this job

Medical

Dental insurance

Vision insurance

Retirement plan

Job summary

PepsiCo’s Global Emerging Technologies Security Team is seeking a Senior Information Security Principal with 6–7 years of expertise to lead automation, vulnerability management, and data security initiatives in emerging technologies. You will design scalable security architectures, mentor analysts, and drive integration using APIs with ServiceNow and ITSM platforms.

Based in Plano, TX, you will build automation frameworks with Python/PowerShell/Bash, collaborate with IT and business

Qualifications

• Bachelor's degree or equivalent hands-on experience in cybersecurity.
• 6–7 years of cybersecurity, vulnerability management, software development, and security automation.

Responsibilities

• Develop, optimize, and scale automation scripts (Python, PowerShell, Bash) to improve vulnerability detection, tracking, and remediation.
• Design custom API integrations between data security tools, ServiceNow VR & CC, and ITSM platforms to automate security workflows.
• Implement security automation playbooks that reduce manual efforts and accelerate response times.
• Build security solutions leveraging COTS tools to streamline vulnerability scanning and compliance reporting.
• Implement automated risk-based vulnerability prioritization models, leveraging AI/ML-driven insights where applicable.
• Leverage and optimize the ServiceNow VR module for scalable vulnerability tracking, exception management, and automated ticketing.
• Work closely with IT and business stakeholders to define remediation SLAs, risk thresholds, and compliance requirements.
• Lead the security assessment of data security environments, ensuring compliance with industry standards and best practices.
• Automate the ingestion of data security findings into ServiceNow VR for enhanced tracking and resolution.
• Ensure that security data is accurate, actionable, and seamlessly integrated with ITSM and GRC platforms.
• Apply expert-level knowledge of networking and security protocols (e.g., TCP/IP, HTTP/S, SSH, FTP, DNS, SSL/TLS, VPNs, RDP).
• Develop tools to generate automated compliance reports, track remediation progress, and reduce audit preparation time.
• Stay ahead of emerging threats, regulatory changes, and vulnerability trends, continuously refining security automation strategies.
• Conduct technical design reviews, evaluate security tools, and lead architectural discussions to improve tool effectiveness.
• Provide technical leadership in vulnerability management, container/API security, and security automation.
• Define and track KPIs to gauge security effectiveness and direct continuous improvement efforts.
• Mentor junior and mid-level security analysts, sharing best practices in automation, API development, and risk prioritization.
• Develop comprehensive security documentation, playbooks, and process improvements.

Skills

Python

PowerShell

Bash

Vulnerability management

Data security

Security automation

APIs integration

Terraform

CloudFormation

Kubernetes

Docker

ServiceNow

ITSM

Networking

CICD

AWS/Azure/Google Cloud

Education

Bachelor's degree in Cybersecurity, CS, IT, or related field

Tools

Kubernetes

Docker

Terraform

CloudFormation

ServiceNow

ITSM tooling

Job description

Overview

PepsiCo’s Global Emerging Technologies Security Team is responsible for building and operationalizing security solutions in emerging technology areas like data security, containers, API. Our mission is to effectively and efficiently make security risks visible to the business and actionable by them.

Within the Cyber Fusion Center, the Emerging Technologies Security Team is looking for an experienced and highly technical Senior Information Security Principal with 6 to 7 years of expertise in Vulnerability Management, Data Security, Software Development, Security Automation, and Enterprise Security Operations. This role demands advanced coding skills (Python, PowerShell, Bash, or equivalent) to develop automation frameworks that integrates security tools, and optimizes vulnerability remediation workflows.

As a seasoned professional, you will lead strategic security initiatives for building and operationalizing security solutions in emerging technology areas like data security, containers, API, AI/ML. You will design scalable security architectures and solutions, review and suggest COTS products, and mentor junior analysts.

Responsibilities

• Develop, optimize, and scale automation scripts (Python, PowerShell, Bash) to improve vulnerability detection, tracking, and remediation.


• Design custom API integrations between data security tools, ServiceNow VR & CC, and ITSM platforms to automate security workflows.


• Implement security automation playbooks that reduce manual efforts and accelerate response times.


• Build security solutions leveraging COTS tools to streamline vulnerability scanning and compliance reporting.


• Implement automated risk-based vulnerability prioritization models, leveraging AI/ML-driven insights where applicable.


• Leverage and optimize the ServiceNow VR module for scalable vulnerability tracking, exception management, and automated ticketing.


• Work closely with IT and business stakeholders to define remediation SLAs, risk thresholds, and compliance requirements.


• Lead the security assessment of data security environments, ensuring compliance with industry standards and best practices.


• Automate the ingestion of data security findings into ServiceNow VR for enhanced tracking and resolution.


• Ensure that security data is accurate, actionable, and seamlessly integrated with ITSM and GRC platforms.


• Apply expert-\u2011level knowledge of networking and security protocols (e.g., TCP/IP, HTTP/S, SSH, FTP, DNS, SSL/TLS, VPNs, RDP).


• Develop tools to generate automated compliance reports, track remediation progress, and reduce audit preparation time.


• Stay ahead of emerging threats, regulatory changes, and vulnerability trends, continuously refining security automation strategies.


• Conduct technical design reviews, evaluate security tools, and lead architectural discussions to improve tool effectiveness.


• Provide technical leadership in vulnerability management, container/API security, and security automation.


• Define and track KPIs to gauge security effectiveness and direct continuous improvement efforts.


• Mentor junior and mid-level security analysts, sharing best practices in automation, API development, and risk prioritization.


• Develop comprehensive security documentation, playbooks, and process improvements.

Accountabilities

• Execute on projects, objectives, and deliverables in alignments with team vision, mission, and goals.


• Routinely develop and update security documentation, processes, and technologies to adapt to emerging threat landscape.


• Develop automation to scale global resilient security capabilities.


• Collaborate with partner teams, service owners, and senior leadership to influence, prioritize, and drive the resolution of discovered security findings.


• Participate in security reviews, audits, on-\u2011site engagements, and support incidents after-\u2011hours when required.

Compensation and Benefits:

• The expected compensation range for this position is between $93,500 - $156,450.


• Location, confirmed job-\u2011related skills, experience, and education will be considered in setting actual starting salary. Your recruiter can share more about the specific salary range during the hiring process.


• Bonus based on performance and eligibility target payout is 10% of annual salary paid out annually.


• Paid time off subject to eligibility, including paid parental leave, vacation, sick, and bereavement.


• In addition to salary, PepsiCo offers a comprehensive benefits package to support our employees and their families, subject to elections and eligibility: Medical, Dental, Vision, Disability, Health, and Dependent Care Reimbursement Accounts, Employee Assistance Program (EAP), Insurance (Accident, Group Legal, Life), Defined Contribution Retirement Plan.

Qualifications

Education & Years of experience

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field (or equivalent hands-\u2011on experience).


• 6 to 7 years of experience in cybersecurity, vulnerability management, software development and security automation.

Mandatory Technical Skills

• Strong programming skills in Python, PowerShell, Bash, or equivalent languages for security automation.


• Deep expertise in data security and vulnerability management.


• Proficiency in Infrastructure-as-Code security (Terraform, CloudFormation), container security (Kubernetes, Docker) and serverless environment security.


• Knowledge in multiple areas of data security and operations: Data Loss Prevention (DLP), data minimization, data discovery, cloud data protection, Privileged Access Management (PAM), data privacy, data labeling, data classification and rights management, data encryption, and data access governance.


• Excellent technical cybersecurity and engineering/development skills, with experience in using APIs to integrate disparate security technologies and security platforms (ex: ProofPoint, Cyera, ServiceNow, ITSM).


• Familiarity or hands-\u2011on experience with: Networking configurations, routing, firewalling; DevOps ecosystem: CICD tools, orchestration tools; Cloud computing environments (AWS, Azure, and Google Compute)


• Proven ability to lead security automation initiatives and mentor junior analysts.


• Strong analytical, troubleshooting, and problem-\u2011solving skills.

Non-technical Skills

• A proactive and positive team player who is impact-focused, driven, curious, analytical, and a self-\u2011starter.


• High level of integrity and ethical standards.


• Excellent problem-\u2011solving skills, with a focus on long-\u2011term system sustainability.


• Ability to establish trust relationships and influence others to positively impact the security posture and the business.


• Solid customer orientation with excellent oral and written communication skills in English.


• Operates extremely well under pressure, balancing multiple priorities in a fast-\u2011paced environment.

Differentiating Behaviors:

• Focuses on scalable security solutions rather than individual tool deployments.


• Uses automation and data-\u2011driven decision-\u2011making to improve security tooling.


• Proactively eliminates security bottlenecks in development workflows.


• Ensures security signals are high-\u2011fidelity, prioritized, and developer friendly.


• Ability to weigh the relative costs/benefits/trade-\u2011offs of potential actions and identify the best resolution.


• Demonstrates leadership by driving security innovation, defining best practices, and influencing security culture.