Security Specialist - Application Security

PNC; Pittsburgh (Allegheny County); On-site; USD 91,000 - 185,900; Full time

Benefits offered by this job

Medical coverage

Dental coverage

Vision coverage

401(k) with match

Stock purchase plan

Wellness program

Paid holidays

Job summary

PNC is seeking a Security Specialist to join its Technology organization in multiple U.S. locations, including Pittsburgh, PA, and other cities. The role focuses on threat modeling, secure software design, and strong authentication solutions to improve the firm’s security posture.

You will work with development teams, participate in SDLC reviews, and advise on security controls. PNC emphasizes in-office culture with collaborative teams and competitive benefits, including comprehensive health

Qualifications

• Experience with threat modeling and application security.
• Ability to remediate OWASP/API security vulnerabilities.
• Experience with authentication solutions and secure design principles.
• Strong SDLC analysis and security design experience.
• Excellent communication and teamwork skills.

Responsibilities

• Provides technical evaluation and analysis in a Security area to improve overall posture.
• Applies security concepts, reviews information, executes tasks, analyzes requirements, reviews logs, and creates documentation.
• Advises on complex security procedures and products for clients and staff; enforces controls.
• Conducts security assessments and recommends corrective actions for data security.
• Develops policies to standardize security functions and ensure development meets business needs.

Skills

Threat modeling

Security design

Authentication solutions

SDLC analysis

Security architecture

Agile practices

SAST/DAST/RASP

Communication skills

Education

Bachelor's degree

CSSLP

SANS GWAPT

Tools

API Security tools

BSIMM/SAMM

Job description

Position Overview

At PNC, our people are our greatest differentiator and competitive advantage in the markets we serve. We are all united in delivering the best experience for our customers. We work together each day to foster an inclusive workplace culture where all of our employees feel respected, valued and have an opportunity to contribute to the company’s success. As a Security Specialist within PNC's Technology organization, you will be based in Pittsburgh, PA; Cleveland, OH; Birmingham, AL; Dallas, TX or Lakewood, CO

R229937

Job Profile

Position Overview

At PNC, our people are our greatest differentiator and competitive advantage in the markets we serve. We are all united in delivering the best experience for our customers. We work together each day to foster an inclusive workplace culture where all of our employees feel respected, valued and have an opportunity to contribute to the company’s success. As a Security Specialist within PNC's Technology organization, you will be based in Pittsburgh, PA; Cleveland, OH; Birmingham, AL; Dallas, TX or Lakewood, CO

An Ideal Candidate Will Have

• Hands-on experience performing threat modeling
• In-depth experience guiding development teams with remediating common application vulnerabilities such as OWASP, API Security, secure design
• Hands-on experience building and implementing strong authentication solutions
• Passionate about creating secure software and can articulate why
• Ability to analyze gaps in SDLC and recommend reasonable solutions
• Hands-on experience with secure design, security architecture, and implementing software security solutions
• Ability to work independently and as part of a team
• Agile development concepts and methods (scrum, Kanban)Experience with SAST, DAST, RASP, CI/CD pipelines
• Strong communication and relationship building skills

Preferred

• Hands-on experience with API Security tools
• Knowledge and experience with software security frameworks (e.g., BSIMM, SAMM)Strong technical skills in penetration testing
• Certified Secure Software Lifecycle Professional (CSSLP), SANS GWAPT
• Public cloud security (e.g., AWS, Azure, GCP)Software development experience
• Experience using SD Elements or similar tools
• Metrics and reporting

PNC is an in-office company that fosters a supportive culture where employees can thrive and achieve balance. We encourage candidates to connect with their recruiter and hiring manager to understand workplace expectations and ensure the role aligns with their goals.

PNC will not provide sponsorship for employment visas or participate in STEM OPT for this position.

Job Description

• Provides technical evaluation and analysis in a specific Security area. Supports activities, process, and tools needed to improve overall security posture of the organization. Primary responsibilities do not include Architect or Engineering responsibilities.
• Applies security concepts, reviews information, executes defined tasks, analyzes requirements, reviews logs, and creates documentation. Performs investigation and data loss prevention, data manipulation, and coordination of activities. Performs actions to address or mitigate risks and vulnerabilities. Reviews and defines controls.
• Advises on more complex security procedures and products for clients, security administrators and network operations. Participates in enforcement of control security risks and threats; potential of one more controls subject to manager discretion. Shares knowledge with staff.
• Conducts security assessments and other information security routines consistently. Investigates and recommends corrective actions for data security related to established guidelines.
• Develops policies and procedures to standardize security functions and eliminate potential vulnerabilities and threats. Oversees that business needs are being met during development.

PNC Employees take pride in our reputation and to continue building upon that we expect our employees to be:

• Customer Focused - Knowledgeable of the values and practices that align customer needs and satisfaction as primary considerations in all business decisions and able to leverage that information in creating customized customer solutions.
• Managing Risk - Assessing and effectively managing all of the risks associated with their business objectives and activities to ensure they adhere to and support PNC's Enterprise Risk Management Framework.

Qualifications

Successful candidates must demonstrate appropriate knowledge, skills, and abilities for a role. Listed below are skills, competencies, work experience, education, and required certifications/licensures needed to be successful in this position.

Preferred Skills

Access Control (AC), Building Architecture, Customer Solutions, Disaster Recovery Planning, Information Security, Network Security, Physical Security, Risk Assessments, Security Technologies

Competencies

Analytical Thinking, Effective Communications, Information Assurance, Information Security Management, Information Security Technologies, IT Environment, IT Standards, Procedures & Policies, IT Systems Management, Problem Solving, Software Security Assurance

Work Experience

Roles at this level typically require a university / college degree, with 5+ years of industry-relevant experience. Specific certifications are often required. In lieu of a degree, a comparable combination of education, job specific certification(s), and experience (including military service) may be considered.

Education

Bachelors

Certifications

No Required Certification(s)

Licenses

No Required License(s)

Pay Transparency

Base Salary: $91,000.00 – $185,900.00

Salaries may vary based on geographic location, market data and on individual skills, experience, and education. This role is incentive eligible with the payment based upon company, business and/or individual performance.

Application Window

Generally, this opening is expected to be posted for two business days from 07/21/2026, although it may be longer with business discretion.

Benefits

• medical/prescription drug coverage (with a Health Savings Account feature), dental and vision options
• employee and spouse/child life insurance
• short and long-term disability protection
• 401(k) with PNC match, pension and stock purchase plans
• dependent care reimbursement account
• back-up child/elder care
• adoption, surrogacy, and doula reimbursement
• educational assistance, including select programs fully paid
• a robust wellness program with financial incentives
• maternity and/or parental leave
• up to 11 paid holidays each year
• 9 occasional absence days each year, unless otherwise required by law
• between 15 to 25 vacation days each year, depending on career level
• and years of service

To learn more about these and other programs, including benefits for full time and part-time employees, visit pncthrive.com.

Disability Accommodations Statement

If an accommodation is required to participate in the application process, please contact us via email at [e-mail]. Please include “accommodation request” in the subject line title and be sure to include your name, the job ID, and your preferred method of contact in the body of the email. Emails not related to accommodation requests will not receive responses. Applicants may also call 877-968-7762 and say "Workday" for accommodation assistance. All information provided will be kept confidential and will be used only to the extent required to provide needed reasonable accommodations.

Equal Employment Opportunity (EEO)

PNC provides equal employment opportunity to qualified persons regardless of race, color, sex, religion, national origin, age, sexual orientation, gender identity, disability, veteran status, or other categories protected by law. This position is subject to the requirements of Section 19 of the Federal Deposit Insurance Act (FDIA) and, for any registered role, the Secure and Fair Enforcement for Mortgage Licensing Act of 2008 (SAFE Act) and/or the Financial Industry Regulatory Authority (FINRA), which prohibit the hiring of individuals with certain criminal history.

California Residents

Refer to the California Consumer Privacy Act Privacy Notice to gain understanding of how PNC may use or disclose your personal information in our hiring practices.