­versary Emulation Senior Analyst

Auto req ID: 267435BR Job Description Within the Cyber Fusion Center organization, the Adversary Emulation Senior Analyst is responsible for improving PepsiCo’s security posture through adversarial simulation assessments which will proactively identify gaps in the existing technologies and processes used to protect PepsiCo’s business operations. Perform web app penetration testing and red teaming activities in line with the goal of discovering vulnerabilities, reducing response time to security events, and raising confidence in detections Develop test cases, perform unit testing, resolve issues and coordinate company-wide improvements to fix security gaps Establish project deliverables and priorities with Attack Surface Management leadership Ensure compliance with key controls Participate in security reviews Maintain and develop pentesting team's lab capabilities Research current trends and developments in red teaming/pentesting tools, techniques, and practices, specifically related to Cloud and OT Create and delivers custom trainings to CFC and InfoSec teams, coach your peers Collaborate with CFC teams on project execution and PepsiCo security improvements Review and resolve project/initiatives requirements according to established timelines Produce detailed technical reports and presentations in support of adversary emulation activities Provide timely, comprehensive and accurate information to Information Security leadership in both written and verbal communications. Maintain a professional communicative relationship with InfoSec peers and PepsiCo users throughout the adversary emulation program execution Ensure team success through organizational, functional, and team alignment towards team mission and objectives Develop the requisite expertise, knowledge, and ability to perform independently Bring up innovative ideas, based on your own experience or information gathered from external communities, and actively participate into Adversary Emulation function’s growth Routinely develop and update adversary emulation documentation and processes, to ensure it remains aligned with industry best practices and latest tool development Participate in after-hours activities when required Qualifications/Requirements 3+ years of work experience in information security, especially in a security operations role (e.g. SOC, IR, Digital Forensics, Malware Analysis, Pentest), is required Bachelor or master degree in Information Technology or related discipline is required Information Security certifications such as OSCP, OSCE, GPEN, GWAPT or GXPN are a plus Technical proficiency with information security concepts and practices, general understanding of SOC operations Good Linux and Windows server management experience Good Web applications & Web services coding experience Familiarity with C2 software such as Cobalt Strike Familiarity with Burp suite and Nessus software Experience in programming and scripting languages (e.g. Python, PowerShell) is a plus Ability to interact with Adversary Emulation Control Cell members to convey information of planned red team mission Solid customer orientation with excellent oral and written communication skills in English A team-focused mentality with the proven ability to work effectively with diverse stakeholders An ability to effectively influence others to modify their opinions, plans, or behaviors Proactive attitude, seeking for improvement opportunities which can positively impact the security posture and the business Decision-making capabilities, with an ability to weigh the relative costs and benefits of potential actions and identify the most appropriate one An ability to work extremely well under pressure while maintaining a professional image and approach Relocation Eligible: Not Applicable Job Type: Regular