Security Testing Specialist

PNC Financial Services Group is seeking an experienced Security Testing Specialist to join its Technology Security organization in Denver, CO, with an onsite work location in Lakewood, CO. In this role, you will support application security testing for released software deployments, using both manual and automated dynamic testing within a 3-to-4-day testing window.

The position centers on ethical hacking for web and mobile applications to uncover vulnerabilities, then partnering with stakeholders to review findings and determine risk ratings. You will also help evolve testing techniques and processes as part of ongoing improvements to information security approaches and methodologies.

Position overview

• Security testing work for released based software deployments in a 3-to-4-day testing window
• Role is for an experienced application security tester
• Based in Denver, CO with onsite location in Lakewood, CO

Responsibilities

• Execute security testing and ethical hacks of web and mobile applications to discover vulnerabilities
• Perform both manual and automated dynamic security testing to identify issues aligned to the OWASP Top 10
• Utilize Agentic AI solutions for dynamic security testing
• Review testing results with stakeholders and help determine risk ratings
• Develop new techniques and processes to identify application vulnerabilities
• Assist with the design and implementation of security solutions, and continuously enhance information security approaches and methodologies at manager discretion
• Carry out security testing of applications, infrastructure, and/or platforms to discover security vulnerabilities
• Perform manual testing to validate vulnerabilities
• Create reports to review testing results with stakeholders

Requirements

• Application security testing experience
• Experience with Burp Suite
• Knowledge of manual application security testing methods
• Experience with automated dynamic application testing tools
• Familiarity with the OWASP Top 10 Web Application Security Risks
• API security testing experience
• Strong understanding of attack methodologies
• Experience with cloud environments
• Roles at this level typically require a university / college degree with 5+ years of industry-relevant experience
• No required certification(s) and no required license(s)

Preferred skills

• API security testing
• Strong understanding of attack methodologies
• Experience with cloud environments
• Access Control (AC)
• Building Architecture
• Customer Solutions
• Disaster Recovery Planning
• Information Security
• Network Security
• Physical Security
• Risk Assessments
• Security Technologies

Core competencies

• Analytical Thinking
• Effective Communications
• Information Assurance
• Information Security Management
• Information Security Technologies
• IT Environment
• IT Standards, Procedures & Policies
• IT Systems Management
• Problem Solving
• Software Security Assurance

Salary and experience

• Base salary: USD 100,100 - 185,900 per year
• Pay may vary based on geographic location, market data, and individual skills, experience, and education
• Incentive eligible; payment based upon company, business and/or individual performance
• Minimum experience: 5 years
• Education: Bachelors

Benefits

• Medical/prescription drug coverage (with a Health Savings Account feature)
• Dental and vision options
• Employee and spouse/child life insurance
• Short and long-term disability protection
• 401(k) with PNC match
• Pension and stock purchase plans
• Dependent care reimbursement account
• Back-up child/elder care
• Adoption, surrogacy, and doula reimbursement
• Educational assistance, including select programs fully paid
• Robust wellness program with financial incentives
• Maternity and/or parental leave
• Up to 11 paid holidays each year
• 9 occasional absence days each year, unless otherwise required by law
• 15 to 25 vacation days each year, depending on career level
• PNC will not provide sponsorship for employment visas or participate in STEM OPT for this position

Tech and tools

• Burp Suite
• Agentic AI

Application window

• Generally expected to be posted for two business days from 08/10/2026, though it may be longer with business discretion

Disability accommodations and EEO

• For accommodation requests, contact [email protected] and include “accommodation request” in the subject line, plus name, job ID, and preferred method of contact
• Applicants may also call 877-968-7762 and say “Workday” for accommodation assistance
• All information provided will be kept confidential and used only as needed to provide reasonable accommodations
• PNC provides equal employment opportunity regardless of protected characteristics under law

Additional policy notes

• California residents should reference the California Consumer Privacy Act Privacy Notice to understand how personal information may be used or disclosed in hiring practices
• This position is subject to FDIA Section 19 and, for any registered role, SAFE Act and/or FINRA requirements regarding prohibited criminal history

FDIA/SAFE/FINRA criminal history requirement statement: This position is subject to the requirements of Section 19 of the Federal Deposit Insurance Act (FDIA) and, for any registered role, the Secure and Fair Enforcement for Mortgage Licensing Act of 2008 (SAFE Act) and/or the Financial Industry Regulatory Authority (FINRA), which prohibit the hiring of individuals with certain criminal history.