AppSec Analyst: Secure SDLC & OWASP Focus

PNC; Pittsburgh (Allegheny County); On-site; USD 75,000 - 138,000; Full time

Benefits offered by this job

Medical coverage

401(k) with match

Paid holidays and time off

Job summary

PNC is seeking a Security Analyst within its Technology organization. The role supports security posture across the software lifecycle and collaborates with developers, product managers, and operations in multiple U.S. locations including Pittsburgh.

The ideal candidate has knowledge of OWASP Top 10, SDLC awareness, and strong analytical and communication skills. You will perform assessments, document findings, and help drive remediation with guidance, while promoting repeatable security

Qualifications

• Knowledge of common application security concepts and vulnerability types (e.g., OWASP Top 10).
• Exposure to the SDLC and security integration into design, development, and testing.
• Ability to analyze information, follow security processes, and execute tasks with attention to detail.
• Strong analytical and problem-solving skills to identify risks and support remediation.
• Effective communication to explain findings to developers and product managers.
• Willingness to coach partners on security processes and expectations.
• Ability to work independently and in cross-functional teams.
• Familiarity with Agile delivery concepts (Scrum, Kanban).

Responsibilities

• Provides technical evaluation and analysis to improve security posture.
• Applies security concepts, reviews information, executes tasks, and creates documentation.
• Advises on complex security procedures and products for clients and staff.
• Conducts security assessments and recommends corrective actions per guidelines.

Skills

OWASP Top 10

SDLC familiarity

Security analysis

Communication

Coaching security

Agile (Scrum/Kanban)

Teamwork

Education

Bachelor's degree

Tools

SAST tools

DAST tools

Vulnerability scanning

Job description

PNC is seeking a Security Analyst within its Technology organization. The role supports security posture across the software lifecycle and collaborates with developers, product managers, and operations in multiple U.S. locations including Pittsburgh.

The ideal candidate has knowledge of OWASP Top 10, SDLC awareness, and strong analytical and communication skills. You will perform assessments, document findings, and help drive remediation with guidance, while promoting repeatable security