PNC’s Technology organization is hiring an Application Security Analyst to strengthen application security posture through technical evaluation, assessments, and risk and vulnerability mitigation. The role focuses on investigation, documentation, and support for secure practices across development and security processes.

Role Location

Phoenix, AZ (onsite)

Compensation

Base Salary: USD 75,000 - 137,500 per year
Salaries may vary by geographic location, market data, and individual skills, experience, and education.
This role is incentive eligible, with payment based on company, business, and/or individual performance.

Summary

The Application Security Analyst role is part of PNC Technology and supports efforts to improve application security posture through assessments, investigations, risk and vulnerability mitigation, and documentation. This position may be based in Denver, CO; Phoenix, AZ; Birmingham, AL; Dallas, TX; Pittsburgh, PA; or Cleveland, OH.

Responsibilities

Provide technical evaluation and analysis related to application security.
Support activities, processes, and tools used to improve the organization’s overall security posture.
Apply security concepts, review information, execute defined tasks, analyze requirements, review logs, and create documentation.
Perform investigations and activities related to data loss prevention and data manipulation, including coordination of related work.
Take actions to address or mitigate risks and vulnerabilities.
Review and help define security controls.
Advise clients, security administrators, and network operations on more complex security procedures and products.
Participate in enforcement activities for control-related security risks and threats, with opportunities for additional controls subject to manager discretion.
Share knowledge with staff.
Conduct security assessments and other information security routines consistently.
Investigate and recommend corrective actions for data security issues aligned to established guidelines.

Requirements

Knowledge of common application security concepts and vulnerability types (for example, OWASP Top 10), with the ability to map concepts to real-world systems.
Exposure to the Software Development Lifecycle (SDLC), with interest in where security fits into design, development, and testing.
Ability to analyze information, follow defined security processes, and complete assigned security tasks with attention to detail.
Strong analytical and problem-solving skills to identify risks and support remediation under guidance.
Effective communication skills to explain security findings, vulnerabilities, and risks to developers, product managers, and non-security partners.
Willingness to coach and educate partners on security processes and expectations to support consistent, repeatable practices.
Ability to work independently on assigned tasks and collaboratively with cross-functional teams.
Familiarity with Agile delivery concepts, including Scrum and Kanban.
Hands-on exposure to application security, secure coding concepts, or software development.
Familiarity with security testing concepts or tools (such as vulnerability scanning results and SAST/DAST outputs), with willingness to learn tool usage on the job.
Knowledge of security frameworks, standards, or best practices (for example, OWASP and NIST) or strong interest in building that knowledge.
Exposure to cloud computing concepts or modern application architectures (for example, APIs and microservices) is a plus.
Entry-level or foundational security certifications (for example, Security+ and GIAC Fundamentals) or progress toward a relevant certification.
Demonstrated interest in application security, product security, or secure software development through academic projects, personal learning, or prior roles.
Strong documentation skills to produce clear notes, assessments, and evidence supporting security processes and controls.
Typical requirements at this level include a university/college degree and 3+ years of relevant or direct industry experience.

Education: Bachelors

Minimum Experience: 3 years

No Required Certification(s)

No Required License(s)

No Required or Preferred Language Assessments

Technologies

OWASP Top 10
SDLC
Agile delivery concepts
Scrum
Kanban
SAST
DAST
NIST
APIs
Microservices
Security+
GIAC Fundamentals

Preferred Skills

Cyber Threat Intelligence
Data Security
Fraud Prevention
Information Security
Intrusion Detection
Network Security
Security Audit
Security Evaluations
Security Operations
Vulnerability Assessments

Competencies

Analytical Thinking
Effective Communications
Information Assurance
Information Security Management
Information Security Technologies
IT Environment
IT Standards, Procedures & Policies
IT Systems Management
Problem Solving
Software Security Assurance

Benefits

Medical/prescription drug coverage (with a Health Savings Account feature)
Dental and vision options
Employee and spouse/child life insurance
Short and long-term disability protection
401(k) with PNC match, pension and stock purchase plans
Dependent care reimbursement account
Back-up child/elder care
Adoption, surrogacy, and doula reimbursement
Educational assistance, including select programs fully paid
Robust wellness program with financial incentives
Maternity and/or parental leave
Up to 11 paid holidays each year
9 occasional absence days each year, unless otherwise required by law
15 to 25 vacation days each year, depending on career level and years of service

Application Window

Generally expected to be posted for two business days from 11/05/2026, though it may be longer at business discretion.

Disability Accommodations

If an accommodation is required to participate in the application process, contact [email protected] and include “accommodation request” in the subject line. Include name, job ID, and preferred method of contact in the body. Applicants may also call 877-968-7762 and say “Workday” for accommodation assistance. All information provided will be kept confidential and used only to the extent required to provide reasonable accommodations.

Equal Employment Opportunity

PNC provides equal employment opportunity to qualified persons regardless of race, color, sex, religion, national origin, age, sexual orientation, gender identity, disability, veteran status, or other categories protected by law. This position is subject to the requirements of Section 19 of the Federal Deposit Insurance Act (FDIA) and, for registered roles, the Secure and Fair Enforcement for Mortgage Licensing Act of 2008 (SAFE Act) and/or FINRA, which prohibit the hiring of individuals with certain criminal history.

California Residents

Refer to the California Consumer Privacy Act Privacy Notice to understand how PNC may use or disclose your personal information in hiring practices.

Application Security Analyst

Job Description