Security Testing Specialist Sr - Application Security - Tuesday - Saturday - 1pm MST - 9pm MST

PNC; Denver (CO); On-site; USD 112,000 - 229,000; Full time

Job summary

PNC is seeking an experienced Security Testing Specialist Sr to join its Technology Security team. Based in Denver, CO (or other listed locations), you will conduct manual and automated security testing of web and mobile apps, focusing on OWASP Top 10 risks and cloud security controls.

You will review results with stakeholders, mentor team members, and help shape testing techniques and security practices across the organization.

Qualifications

• API security testing experience and knowledge of web security risks.
• Strong understanding of attack methodologies used to compromise applications.
• Experience working with cloud environments and security controls.

Responsibilities

• Executes security testing and ethical hacks of web and mobile applications to discover vulnerabilities.
• Performs both manual and automated dynamic security testing that identify OWASP Top 10 vulnerabilities.
• Utilize Agentic AI solutions for dynamic security testing
• Reviews testing results with stakeholders and helps to determine risk ratings.
• Develops new techniques and processes that identify application vulnerabilities.
• Assists in the design and implementation of security solutions and continuously enhances information security approaches and methodologies at manager discretion.

Skills

API Security Testing

Attack Methodologies

Cloud Environments

Education

Bachelor's degree

Job description

Position Overview

At PNC, our people are our greatest differentiator and competitive advantage in the markets we serve. We are all united in delivering the best experience for our customers. We work together each day to foster an inclusive workplace culture where all of our employees feel respected, valued and have an opportunity to contribute to the company's success. As a Security Testing Specialist Sr within PNC's Technology Security organization, you will be based in Denver, CO; Phoenix, AZ; Birmingham, AL; Dallas, TX; Pittsburgh, PA or Cleveland, OH.

This role is for an experienced application security tester. We test released based software deployments in a 3-to-4-day testing window. The ideal candidate should have experience with Burp Suite, manual application security testing methods, and automated dynamic application testing tools. They will also be familiar with the OWASP Top 10 Web Application Security Risks.

CO Salary Range

CO Salary Range: USD 112,000.00 - 228,800.00 per year

Responsibilities

• Executes security testing and ethical hacks of web and mobile applications to discover vulnerabilities.
• Performs both manual and automated dynamic security testing that identify OWASP Top 10 vulnerabilities.
• Utilize Agentic AI solutions for dynamic security testing
• Reviews testing results with stakeholders and helps to determine risk ratings.
• Develops new techniques and processes that identify application vulnerabilities.
• Assists in the design and implementation of security solutions and continuously enhances information security approaches and methodologies at manager discretion.

Preferred Qualifications

• API Security Testing
• Strong understanding of attack methodologies
• Experience with cloud environments

Our Expectations

PNC Employees take pride in our reputation and to continue building upon that we expect our employees to be:

• Customer Focused - Knowledgeable of the values and practices that align customer needs and satisfaction as primary considerations in all business decisions and able to leverage that information in creating customized customer solutions.
• Managing Risk - Assessing and effectively managing all of the risks associated with their business objectives and activities to ensure they adhere to and support PNC's Enterprise Risk Management Framework.

Visa & Sponsorship

PNC will not provide sponsorship for employment visas or participate in STEM OPT for this position.

Job Description

Provides subject matter expertise for security testing capabilities. Carries out manual and automated security testing of applications, infrastructure, and/or platforms to discover security vulnerabilities.

Performs manual & automated security testing.

Performs manual testing to validate vulnerabilities.

Creates reports and review test results with stakeholders.

Assists in the design and implementation of security solutions and continuously enhances information security approaches and methodologies at manager discretion.

Provides subject matter expertise. Lead and mentor at manager discretion.

Preferred Skills

• Access Control (AC)
• Application Security Testing
• Building Architecture
• Customer Solutions
• Disaster Recovery Planning
• Information Security
• Network Security
• Physical Security
• Risk Assessments
• Security Technologies
• Web Application Security Testing

Competencies

• Analytical Thinking
• Effective Communications
• Information Security Management
• Information Security Technologies
• IT Environment
• IT Standards
• Procedures & Policies
• Knowledge of Organization
• Problem Solving

Work Experience

Roles at this level typically require a university / college degree. Higher level education such as a Masters degree, PhD, or certifications is desirable. Industry relevant experience is typically 8+ years. Specific certifications are often required. In lieu of a degree, a comparable combination of education, job specific certification(s), and experience (including military service) may be considered.

Education

Bachelors

Certifications

No Required Certification(s)

Licenses

No Required License(s)

Pay Transparency

Base Salary: $112,000.00 - $228,800.00

Salaries may vary based on geographic location, market data and on individual skills, experience, and education. This role is incentive eligible with the payment based upon company, business and/or individual performance.

Application Window

Generally, this opening is expected to be posted for two business days from 07/01/2026, although it may be longer with business discretion.