Application Security Analyst (SAST)

Join PNC’s Technology Security organization and help strengthen application security across the organization. This in-office role offers a supportive culture and work-life balance while you improve security posture through hands-on source code review, application onboarding, and structured risk mitigation. Based in Pittsburgh, PA (onsite), this position also includes incentive eligibility and a comprehensive benefits package.

What you’ll do

In this Application Security Analyst (SAST) role, you will support security-focused engineering by validating code and assisting teams as applications come onboard to PNC’s platform.

• Review source code to identify vulnerabilities that exist in code (SAST)
• Collaborate with development teams to onboard applications to PNC’s platform
• Assist the SAST process using AI and non-AI tooling
• Provide technical evaluation and analysis and document findings
• Support activities, processes, and tools that improve the organization’s overall security posture
• Apply security concepts by reviewing information, executing defined tasks, analyzing requirements, and reviewing logs
• Perform investigation and data loss prevention, including data manipulation and coordination of activities
• Take actions to address or mitigate risks and vulnerabilities
• Review and define controls and advise on more complex security procedures and products for clients, security administrators, and network operations
• Participate in enforcement of control security risks and threats (additional controls may be subject to manager discretion)
• Share knowledge with staff and conduct security assessments consistently
• Investigate and recommend corrective actions aligned to established data security guidelines

Key skills and experience

• Cyber Threat Intelligence
• Data Security, Fraud Prevention, and Information Security
• Intrusion Detection and Network Security
• Security Audit, Security Evaluations, Security Operations, and Vulnerability Assessments
• Analytical Thinking, Effective Communications, and Problem Solving
• Information Assurance and Software Security Assurance
• Information Security Management, Information Security Technologies, IT Environment, IT Systems Management, and IT Standards, Procedures & Policies

Education: Bachelor’s degree. Experience: 3+ years of relevant/direct industry experience. Certifications are often desired, and a comparable combination of education, job-specific certifications, and experience (including military service) may be considered.

Benefits at PNC

• Medical and prescription drug coverage with a Health Savings Account feature
• Dental and vision options
• Employee and spouse/child life insurance
• Short- and long-term disability protection
• 401(k) with PNC match, pension, and stock purchase plans
• Dependent care reimbursement account
• Back-up child/elder care
• Adoption, surrogacy, and doula reimbursement
• Educational assistance, including select programs fully paid
• Robust wellness program with financial incentives
• Maternity and/or parental leave
• Up to 11 paid holidays each year
• 9 occasional absence days each year (unless otherwise required by law)
• 15 to 25 vacation days each year depending on career level

Pay transparency

Base salary: $75,000.00 – $137,500.00 per year. Salaries may vary by geographic location, market data, and individual skills, experience, and education. This role is incentive eligible with payment based upon company, business, and/or individual performance.

Role details

• Location: Pittsburgh, PA (onsite)
• Position overview: Ideal for a developer looking to shift into application security within PNC’s Technology Security organization
• Visa sponsorship: PNC will not provide sponsorship for employment visas or participate in STEM OPT for this position

Application process and accommodations

If an accommodation is required to participate in the application process, contact [email protected] and include “accommodation request” in the subject line. You may also call 877-968-7762 and say “Workday.” All information is kept confidential and used only to the extent required to provide reasonable accommodations.

Equal employment opportunity

PNC provides equal employment opportunity to qualified persons regardless of protected characteristics. This position is subject to Section 19 of the Federal Deposit Insurance Act (FDIA) and, for any registered role, the SAFE Act and/or FINRA requirements that prohibit hiring individuals with certain criminal history.

California residents: Refer to the California Consumer Privacy Act Privacy Notice to understand how PNC may use or disclose personal information during hiring.