Application Security Analyst (SAST)

Cybersecurity Jobs; Pittsburgh (Allegheny County); On-site; USD 75,000 - 138,000; Full time

Benefits offered by this job

Health Savings Account

Dental and vision options

Life insurance

Disability protection

401(k) with PNC match

Pension and stock purchase plans

Dependent care reimbursement account

Back-up child/elder care

Adoption, surrogacy, and doula reimb.

Educational assistance

Wellness program with financial incent

Maternity/Parental leave

11 paid holidays

9 absence days

15–25 vacation days

Job summary

PNC is seeking an Application Security Analyst (SAST) in Pittsburgh, onsite, to validate code and assist teams onboarding apps to PNC’s platform.

You will review source code for vulnerabilities, collaborate with developers, and use AI and non-AI tools to strengthen security posture while contributing to risk mitigation and security assessments.

Qualifications

• Bachelor’s degree required; 3+ years of relevant/direct industry experience.
• Certifications are often desired; a comparable mix of education, certifications and experience may be considered.

Responsibilities

• Review source code to identify vulnerabilities (SAST).
• Collaborate with development teams to onboard applications to the platform.
• Assist the SAST process using AI and non-AI tooling.
• Provide technical evaluation and analysis and document findings.
• Support activities, processes, and tools to improve security posture.
• Review information, execute tasks, analyze requirements, and review logs.
• Investigate and address risks and vulnerabilities.
• Review and define controls and advise on complex security procedures.

Skills

Cyber Threat Intelligence

Data Security

Fraud Prevention

Information Security

Intrusion Detection

Security Audits

Security Operations

Vulnerability Assessments

Analytical Thinking

Effective Communications

Problem Solving

Information Assurance

Software Security Assurance

IT Environment

IT Systems Management

IT Standards

Education

Bachelor’s degree

Certifications desirable

Job description

Join PNC’s Technology Security organization and help strengthen application security across the organization. This in-office role offers a supportive culture and work-life balance while you improve security posture through hands-on source code review, application onboarding, and structured risk mitigation. Based in Pittsburgh, PA (onsite), this position also includes incentive eligibility and a comprehensive benefits package.

What you’ll do

In this Application Security Analyst (SAST) role, you will support security-focused engineering by validating code and assisting teams as applications come onboard to PNC’s platform.

• Review source code to identify vulnerabilities that exist in code (SAST)
• Collaborate with development teams to onboard applications to PNC’s platform
• Assist the SAST process using AI and non-AI tooling
• Provide technical evaluation and analysis and document findings
• Support activities, processes, and tools that improve the organization’s overall security posture
• Apply security concepts by reviewing information, executing defined tasks, analyzing requirements, and reviewing logs
• Perform investigation and data loss prevention, including data manipulation and coordination of activities
• Take actions to address or mitigate risks and vulnerabilities
• Review and define controls and advise on more complex security procedures and products for clients, security administrators, and network operations
• Participate in enforcement of control security risks and threats (additional controls may be subject to manager discretion)
• Share knowledge with staff and conduct security assessments consistently
• Investigate and recommend corrective actions aligned to established data security guidelines

Key skills and experience

• Cyber Threat Intelligence
• Data Security, Fraud Prevention, and Information Security
• Intrusion Detection and Network Security
• Security Audit, Security Evaluations, Security Operations, and Vulnerability Assessments
• Analytical Thinking, Effective Communications, and Problem Solving
• Information Assurance and Software Security Assurance
• Information Security Management, Information Security Technologies, IT Environment, IT Systems Management, and IT Standards, Procedures & Policies

Education: Bachelor’s degree. Experience: 3+ years of relevant/direct industry experience. Certifications are often desired, and a comparable combination of education, job‑specific certifications, and experience (including military service) may be considered.

Benefits at PNC

• Medical and prescription drug coverage with a Health Savings Account feature
• Dental and vision options
• Employee and spouse/child life insurance
• Short- and long-term disability protection
• 401(k) with PNC match, pension, and stock purchase plans
• Dependent care reimbursement account
• Back-up child/elder care
• Adoption, surrogacy, and doula reimbursement
• Educational assistance, including select programs fully paid
• Robust wellness program with financial incentives
• Maternity and/or parental leave
• Up to 11 paid holidays each year
• 9 occasional absence days each year (unless otherwise required by law)
• 15 to 25 vacation days each year depending on career level

Pay transparency

Base salary: $75,000.00 – $137,500.00 per year. Salaries may vary by geographic location, market data, and individual skills, experience, and education. This role is incentive eligible with payment based upon company, business, and/or individual performance.

Role details

• Location: Pittsburgh, PA (onsite)
• Position overview: Ideal for a developer looking to shift into application security within PNC’s Technology Security organization
• Visa sponsorship: PNC will not provide sponsorship for employment visas or participate in STEM OPT for this position

Equal employment opportunity

PNC provides equal employment opportunity to qualified persons regardless of protected characteristics. This position is subject to Section 19 of the Federal Deposit Insurance Act (FDIA) and, for any registered role, the SAFE Act and/or FINRA requirements that prohibit hiring individuals with certain criminal history.

California residents: Refer to the California Consumer Privacy Act Privacy Notice to understand how PNC may use or disclose personal information during hiring.