Senior Application Security Engineer

PepsiCo's Global Application Security Program integrates security into software development at enterprise scale. Our mission is to make application security risks visible, actionable, and measurable so they can be remediated efficiently.

Approximately 80% of this role focuses on web application and API security. The engineer will configure, tune, validate, and operate security tools such as SAST/SCA/Secret/DAST scanners; manually triage findings; perform targeted security reviews; integrate scanning into developer workflows through custom development; and manage results through centralized findings-management processes.

The engineer will also support the development and operation of backend automation that initiates scans, monitors scan...