Application Security Analyst
Job Description
Join PNC’s Technology organization as an Application Security Analyst focused on evaluating risk and improving application security controls.
Responsibilities
- Provide technical evaluation and analysis to support security improvements
- Support activities, processes, and tools that improve the organization’s overall security posture
- Apply application security concepts by reviewing information, executing defined tasks, analyzing requirements, reviewing logs, and producing documentation
- Perform investigation activities including data loss prevention and data manipulation, and coordinate related actions
- Take actions to address and mitigate risks and vulnerabilities
- Review and define security controls
- Advise on more complex security procedures and products for clients, security administrators, and network operations
- Participate in enforcement of control-related security risks and threats, with potential additional controls subject to manager discretion
- Share knowledge with staff
- Conduct security assessments and other information security routines consistently
- Investigate and recommend corrective actions aligned to established data security guidelines
Requirements
- Knowledge of common application security concepts and vulnerability types (e.g., OWASP Top 10), with ability to apply them to real-world systems
- Exposure to the Software Development Lifecycle (SDLC) and interest in how security fits into design, development, and testing
- Ability to analyze information, follow defined security processes, and complete assigned security tasks with attention to detail
- Strong analytical and problem-solving skills to identify potential risks and support remediation under guidance
- Effective communication skills to explain security findings, vulnerabilities, and risks clearly to developers, product managers, and non-security partners
- Willingness to coach and educate partners on security processes and expectations to reinforce consistent, repeatable practices
- Ability to work independently and collaborate within cross-functional teams
- Familiarity with Agile delivery concepts (e.g., Scrum, Kanban)
- Hands-on exposure to application security, secure coding concepts, or software development
- Familiarity with security testing concepts or tools (e.g., vulnerability scanning results, SAST/DAST outputs), with ability to learn tooling on the job
- Knowledge of security frameworks, standards, or best practices (e.g., OWASP, NIST), or strong interest in building that knowledge
- Exposure to cloud computing concepts or modern application architectures (e.g., APIs, microservices) is a plus
- Entry-level or foundational security certifications (e.g., Security+, GIAC Fundamentals), or progress toward a relevant certification
- Demonstrated interest in application security, product security, or secure software development through academic projects, personal learning, or prior roles
- Strong documentation skills to create clear notes, assessments, and evidence for security processes and controls
Technologies
- OWASP Top 10
- SDLC
- Scrum
- Kanban
- Vulnerability scanning
- SAST
- DAST
- OWASP
- NIST
- APIs
- Microservices
Base Salary and Job Details
- Location: Farmers Branch, TX (onsite)
- Salary: USD 75,000 - 137,500 per year
- Experience: 3 years minimum
- Education: Bachelor’s
- Base Salary: $75,000.00 – $137,500.00
- Base pay may vary based on geographic location, market data, and individual skills, experience, and education
- Role is incentive eligible with payment based upon company, business and/or individual performance
Benefits
- Medical/prescription drug coverage (with Health Savings Account feature)
- Dental and vision options
- Employee and spouse/child life insurance
- Short and long-term disability protection
- 401(k) with PNC match, pension, and stock purchase plans
- Dependent care reimbursement account
- Back-up child/elder care
- Adoption, surrogacy, and doula reimbursement
- Educational assistance, including select programs fully paid
- Robust wellness program with financial incentives
- Maternity and/or parental leave
- Up to 11 paid holidays each year
- 9 occasional absence days each year, unless otherwise required by law
- Between 15 to 25 vacation days each year, depending on career level
- Years of service
Application Window
- Generally expected to be posted for two business days from 11/05/2026, unless extended with business discretion
Certifications and Licenses
- No required certifications
- No required licenses
Disability Accommodations Statement
- For accommodation requests, contact [email protected] with the subject line containing “accommodation request” and include your name, job ID, and preferred method of contact
- Emails not related to accommodation requests will not receive responses
- Applicants may also call 877-968-7762 and say “Workday” for accommodation assistance
- All information provided will be kept confidential and used only to the extent required to provide reasonable accommodations
Equal Employment Opportunity (EEO)
- PNC provides equal employment opportunity regardless of race, color, sex, religion, national origin, age, sexual orientation, gender identity, disability, veteran status, or other categories protected by law
- This position is subject to Section 19 of the Federal Deposit Insurance Act (FDIA) and, for any registered role, the Secure and Fair Enforcement for Mortgage Licensing Act of 2008 (SAFE Act) and/or FINRA
- These requirements prohibit hiring individuals with certain criminal history
California Residents
- Refer to the California Consumer Privacy Act Privacy Notice for how PNC may use or disclose personal information in hiring practices
Visa Sponsorship
- PNC will not provide sponsorship for employment visas for this position
- PNC will not participate in STEM OPT for this position