Application Security Engineer: Java/.NET Expert

PNC Financial Services Group, Inc.; Phoenix (AZ); On-site; USD 86,000 - 158,000; Full time

Job summary

PNC Financial Services Group, Inc. is seeking a Technology Engineer to strengthen our application security posture. The role focuses on securing software across the SDLC with strong Java and/or .NET foundations and deep OWASP Top 10 knowledge.

You will work closely with engineering teams to promote secure coding practices and validate vulnerabilities. Responsibilities include evaluating security risks, triaging issues, and guiding remediation when immediate fixes aren’t possible, with exposure

Qualifications

• Security-focused software development experience, preferably Java and/or .NET.
• Deep knowledge of OWASP Top 10 and mitigating strategies across SDLC.
• Experience triaging and remediating web vulnerabilities; familiarity with IAST preferred.

Responsibilities

• Identify, evaluate, and mitigate application security risks throughout the SDLC.
• Proficiency in triaging and remediating web application security vulnerabilities.
• Collaborate with application and engineering teams to promote secure coding practices.
• Analyze and validate software vulnerabilities and distinguish true issues from false positives.
• Provide guidance on appropriate mitigation strategies to relevant teams.

Skills

Software Development

Java

.NET

Application Security

OWASP Top 10

IAST

Incident Response

Security Risk Assessments

Education

Bachelor's degree in Computer Science or related field

Tools

IAST

Job description

PNC Financial Services Group, Inc. is seeking a Technology Engineer to strengthen our application security posture. The role focuses on securing software across the SDLC with strong Java and/or .NET foundations and deep OWASP Top 10 knowledge.

You will work closely with engineering teams to promote secure coding practices and validate vulnerabilities. Responsibilities include evaluating security risks, triaging issues, and guiding remediation when immediate fixes aren’t possible, with exposure