Cloud Security Engineer

PNC’s Technology organization is seeking a Cloud Security Engineer to strengthen cloud security capabilities across Azure, AWS, and Palo Alto, while owning vendor and control responsibilities for key CNAPP-related outcomes. This role is based onsite in Lakewood, CO, and the broader position is described for multiple locations including Pittsburgh, PA; Cleveland, OH; Birmingham, AL; Dallas, TX; or Denver, CO.

Role Overview

As a Security Engineer, you will provide ownership for cloud security vendor relationships and control activities tied to RCSA control TEC083. You will enable CNAPP-related capabilities, deliver recurring attestation evidence, and support Cloud Security dashboard views using Microsoft PowerBI.

Key Responsibilities

• Collaborate with partners who own technical controls provided by Cortex Cloud, enabling partner testing and evaluation to determine fit and reduce tool sprawl.
• Build and maintain proactive relationships with vendors, partners, and internal stakeholders to support ongoing evaluation and adoption of new capabilities.
• Provide partners with appropriate access to lower environments for testing and analysis.
• Maintain a vendor relationship across Azure, AWS, and Palo Alto, ensuring response and support needed to evaluate new capabilities.
• Engage with EA and obtain approvals through PNC processes to enable new capabilities that improve cloud security posture.
• Own and drive accountability for vendor issues and challenges, including correction of problems and bugs that affect delivery and value.
• Plan and lead Quarterly Business Review (QBR) activities.
• Act as the RCSA Control owner for Cloud Security - TEC083, including recurring review and analysis of TEC083.
• Identify gaps, determine whether net-new controls are required, and assess whether existing controls are no longer applicable or should belong in a different RAU.
• Provide recurring attestation evidence for each Cloud Security Control, including working with the Cloud Security team to automate evidence collection.
• Assess whether manually obtained evidence can be automated and support automation initiatives where applicable.
• Develop Cloud Security dashboard UI and views using Microsoft PowerBI, enabling stakeholders, partners, and the business to view Azure and AWS configuration violations.
• Provide statistics on dashboard usage to inform stakeholders and ongoing program decisions.
• Engage customers to gather requirements and build a backlog of capabilities for the Cloud Security Roadmap.
• Provide subject matter expertise when applying security concepts, designing, building, and maintaining technology solutions, and owning deliverables aligned to project timelines.
• Partner with architecture to translate high-level designs into implementation specifics, including details such as sizing, integration, onboarding, and operationalization.
• Evaluate patches, updates, and ongoing maintenance, determining impacts when new standards are implemented using change control and governance processes.
• Create and maintain detailed implementation, configuration, design, and engineering documentation; build and implement solutions.
• Collaborate with operational partners to enable transition and day-to-day supportability.
• Provide engineering support for production environments and collaborate with other groups as needed, seeking opportunities to expand a broad knowledge base.

Required Qualifications

• Ability to work with ambiguity within the role.
• Comfort with creatively approaching work to advance the four key pillars: enabling CNAPPs, VRO ownership, RCSA control ownership, and Cloud Security dashboard development.
• Strong capability in building and maintaining relationships.
• Ability to understand customer needs.
• Ability to influence partners to adopt CNAPP capabilities.
• Technical skills and high-level understanding of CNAPP, controls, and dashboard development.
• Typically requires a university or college degree and 5+ years of industry-relevant experience.
• Education: Bachelors.
• Certifications: None required.
• Licenses: None required.
• In lieu of a degree, a comparable combination of education, job-specific certification(s), and experience (including military service) may be considered.

Preferred Skills and Knowledge

• Working knowledge with at least one CNAPP: AWS, Azure, or Palo Alto.
• Access Control (AC), Building Architecture, Customer Solutions, Disaster Recovery Planning, Information Security, Network Security, Physical Security, Risk Assessments, Security Technologies.
• Competencies including Analytical Thinking, Effective Communications, Information Security Management, Information Security Technologies, IT Environment, IT Standards, Procedures & Policies, IT Systems Management, Network and Internet Security, Problem Solving, and Technical Troubleshooting.

Technologies

• Cortex Cloud
• Azure
• AWS
• Palo Alto
• Microsoft PowerBI
• CNAPPs

Compensation

Base Salary: $91,000.00 – $185,900.00 per year.

Salaries may vary based on geographic location, market data, and individual skills, experience, and education. This role is incentive eligible, with payment based upon company, business, and/or individual performance.

Benefits

• Medical/prescription drug coverage with a Health Savings Account feature
• Dental and vision options
• Employee and spouse/child life insurance
• Short and long-term disability protection
• 401(k) with PNC match, pension, and stock purchase plans
• Dependent care reimbursement account
• Back-up child/elder care
• Adoption, surrogacy, and doula reimbursement
• Educational assistance, including select programs fully paid
• Robust wellness program with financial incentives
• Maternity and/or parental leave
• Up to 11 paid holidays each year
• 9 occasional absence days each year, unless otherwise required by law
• Between 15 to 25 vacation days each year, depending on career level
• Years of service

Application Window

Generally expected to be posted for two business days from 07/27/2026, although it may be longer with business discretion.

Disability Accommodations

If an accommodation is required to participate in the application process, contact [email protected] and include “accommodation request” in the subject line, along with your name, the job ID, and your preferred method of contact. Applicants may also call 877-968-7762 and say “Workday” for accommodation assistance. All information provided will be kept confidential and used only to the extent required to provide reasonable accommodations.

Equal Employment Opportunity

PNC provides equal employment opportunity to qualified persons regardless of race, color, sex, religion, national origin, age, sexual orientation, gender identity, disability, veteran status, or other categories protected by law.