Security Specialist - Application Security

Responsibilities

• Provides technical evaluation in a defined security domain and supports the processes, tools, and activities that raise the organization’s overall security posture; architecture or engineering tasks are not the primary focus.
• Applies security concepts to information, completes defined tasks, analyzes requirements, reviews logs, and documents findings; conducts investigations, data loss prevention, data handling, and coordinates activities to mitigate risks; reviews and defines security controls.
• Advises on advanced security procedures and products for clients, security administrators, and network operations; assists in enforcing control risks and threats and may handle additional controls as directed; shares knowledge with staff.
• Performs ongoing security assessments and related information security routines; investigates issues and recommends corrective actions aligned with established guidelines.
• Develops policies and procedures to standardize security functions and reduce vulnerabilities; ensures business needs are considered during development.

Requirements

• Hands-on experience conducting threat modeling.
• Proven ability to guide development teams in remediating common application vulnerabilities (OWASP Top 10), API security, and secure design.
• Practical experience designing and deploying robust authentication solutions.
• Demonstrates a genuine commitment to secure software and can explain the rationale behind security decisions.
• Ability to assess gaps in the SDLC and propose practical mitigations.
• Hands-on experience with secure design, security architecture, and implementing software security controls.
• Capable of working independently and as part of a team.
• Familiar with agile development concepts and methods, including Scrum and Kanban.
• Experience with SAST, DAST, RASP, and integrating security into CI/CD pipelines.
• Strong communication and relationship-building skills.

Technologies

• OWASP
• SAST
• DAST
• RASP
• CI/CD pipelines
• BSIMM
• SAMM
• SD Elements
• AWS
• Azure
• GCP

Benefits

• Medical and prescription drug coverage with a Health Savings Account feature
• Dental and vision plans
• Life insurance for employee and spouse/children
• Short- and long-term disability protections
• 401(k) with company match
• Pension and stock purchase programs
• Dependent care reimbursement account
• Back-up child and elder care
• Adoption, surrogacy, and doula reimbursement
• Educational assistance, including select programs fully paid
• Wellness program with financial incentives
• Maternity or parental leave
• Up to 11 paid holidays per year
• Nine occasional absence days per year
• 15 to 25 vacation days annually depending on career level

Pay Transparency

• Base Salary: 91,000.00 – 185,900.00 USD per year
• Compensation may vary by geography, market data, and individual qualifications; role is incentive eligible based on company, business, and individual performance.

Application Window

• Posting typically remains active for about two business days from 07/21/2026, with potential extension at business discretion.

Disability Accommodations

If an accommodation is required to participate in the application process, please contact [email protected]. Include "accommodation request" in the subject line, and provide your name, the job ID, and your preferred contact method in the message body. Calls are also accepted at 877-968-7762 for accommodation assistance. PNC supports an inclusive and accessible work environment and provides reasonable accommodations for applicants with disabilities.

Equal Employment Opportunity

PNC provides equal employment opportunities to qualified individuals regardless of race, color, sex, religion, national origin, age, sexual orientation, gender identity, disability, veteran status, or other legally protected categories.

California Residents

Refer to the California Consumer Privacy Act Privacy Notice to understand how PNC may use or disclose your personal information in our hiring practices.