Senior App Security Engineer — Mentor Secure Coding

Fairygodboss; Phoenix (AZ); On-site; USD 80,000 - 185,150; Full time

Benefits offered by this job

Medical/prescription coverage

Dental and vision options

401(k) with match

Paid time off

Job summary

PNC seeks a Security Analyst within our Technology organization to coach developers toward secure software and embed security into the SDLC across multiple delivery teams. This role emphasizes collaboration, clear communication, and practical risk remediation.

Based in an in-office environment with location flexibility in the United States (e.g., Phoenix, Pittsburgh, or other hubs), you will apply OWASP, NIST guidance, and secure coding practices.

Qualifications

• Knowledge of OWASP Top 10 and vulnerability types.
• Familiarity with SDLC and security integration.
• Ability to analyze information and follow security processes.
• Strong analytical and problem-solving skills.
• Effective communication to developers and product teams.
• Willingness to educate partners on security practices.
• Ability to work independently and in cross-functional teams.
• Familiarity with Agile delivery concepts.

Responsibilities

• Coach developers to create more secure software.
• Collaborate with developers to secure code.
• Manage projects and tasks related to developer security.
• Set secure coding standards with the team.
• Coach developers on language-specific coding techniques.

Skills

Application security concepts

SDLC exposure

Analytical thinking

Communication skills

Coaching developers

Team collaboration

Agile awareness

Secure coding basics

Education

Bachelor's degree

Tools

SAST/DAST tools

Job description

PNC seeks a Security Analyst within our Technology organization to coach developers toward secure software and embed security into the SDLC across multiple delivery teams. This role emphasizes collaboration, clear communication, and practical risk remediation.

Based in an in-office environment with location flexibility in the United States (e.g., Phoenix, Pittsburgh, or other hubs), you will apply OWASP, NIST guidance, and secure coding practices.