Application Security Analyst

PNC Financial Services Group is seeking an Application Security Analyst within its Technology organization. In this onsite role based in Pittsburgh, PA, you will evaluate application security, analyze risks and vulnerabilities, and help strengthen processes and tools that improve PNC’s overall security posture.

This position supports security assessment routines, documentation, and guidance on complex security procedures. You will also collaborate with technical partners and contribute to consistent enforcement of control-related security risks and threats, with some decisions guided by manager discretion.

What you’ll do

• Provide technical evaluation and analysis to support activities, processes, and tools that improve the organization’s security posture.
• Apply application security concepts by reviewing information, executing defined tasks, analyzing requirements, reviewing logs, and creating documentation.
• Perform investigations and data loss prevention related to data manipulation, while coordinating relevant activities.
• Address or mitigate risks and vulnerabilities by reviewing and defining controls.
• Advise on more complex security procedures and products for clients, security administrators, and network operations teams.
• Participate in enforcement of control security risks and threats, where the scope of additional controls may be determined by a manager.
• Share knowledge with staff and help maintain consistent security assessments and information security routines.
• Investigate and recommend corrective actions aligned to established data security guidelines.

Required qualifications

• Knowledge of common application security concepts and vulnerability types (for example, OWASP Top 10), with the ability to learn how they apply in real-world systems.
• Exposure to the Software Development Lifecycle (SDLC) and interest in understanding where security fits into design, development, and testing.
• Ability to analyze information, follow defined security processes, and execute assigned security tasks with attention to detail.
• Strong analytical and problem-solving skills to identify potential risks and support remediation under guidance.
• Effective communication skills to explain security findings, vulnerabilities, and risks clearly to developers, product managers, and non-security partners.
• Willingness to coach and educate partners on security processes and expectations to reinforce repeatable practices.
• Ability to work independently on assigned tasks and collaboratively in cross-functional teams.
• Familiarity with Agile delivery concepts such as Scrum and Kanban.
• Hands-on exposure to application security, secure coding concepts, or software development.
• Familiarity with security testing concepts or tools (such as vulnerability scanning results, SAST/DAST outputs), with willingness to learn tool usage on the job.
• Knowledge of security frameworks, standards, or best practices (such as OWASP and NIST), or a strong interest in developing that knowledge.
• Entry-level or foundational security certifications (for example, Security+ or GIAC Fundamentals) or progress toward a relevant certification.
• Demonstrated interest in application security, product security, or secure software development through academic projects, personal learning, or prior roles.
• Strong documentation skills to create clear notes, assessments, and evidence supporting security processes and controls.
• Typically requires a bachelor’s degree and 3+ years of relevant/direct industry experience.
• Certifications are often desired; there are no required certifications and no required licenses.

Technologies and frameworks

• OWASP Top 10, SDLC
• Scrum, Kanban
• NIST
• SAST, DAST
• APIs, microservices
• Security+, GIAC Fundamentals

Compensation and location

• Location: Pittsburgh, PA (onsite)
• Base salary: $75,000.00 – $137,500.00 per year
• Salaries may vary by geographic location, market data, and individual skills, experience, and education.
• This role is incentive eligible, with payment based on company, business, and/or individual performance.

Benefits

• Medical/prescription drug coverage with a Health Savings Account feature
• Dental and vision options
• Employee and spouse/child life insurance
• Short and long-term disability protection
• 401(k) with PNC match
• Pension and stock purchase plans
• Dependent care reimbursement account
• Back-up child/elder care
• Adoption, surrogacy, and doula reimbursement
• Educational assistance (including select programs fully paid)
• Robust wellness program with financial incentives
• Maternity and/or parental leave
• Up to 11 paid holidays each year
• 9 occasional absence days each year (unless otherwise required by law)
• Between 15 to 25 vacation days each year, depending on career level
• Years of service

Application window

Generally, this opening is expected to be posted for two business days from 11/05/2026, though it may be longer with business discretion.

Disability accommodations

If an accommodation is required to participate in the application process, contact [email protected]. Applicants may also call 877-968-7762 and say “Workday” for accommodation assistance. All information provided will be kept confidential and used only to the extent required to provide needed reasonable accommodations.