Security Testing Specialist Sr - Application Security

PNC Financial Services Group is hiring a Senior Security Testing Specialist within the Technology Security organization, focused on application security. In this role, you will perform dynamic security testing of released software deployments using both manual and automated approaches, then report results to support risk rating decisions.

Role Overview

This position supports an experienced application security testing function. Testing is performed on released, based software deployments within a 3-to-4-day testing window. The role is based onsite in Lakewood, CO.

As a Senior Security Testing Specialist, you will execute security testing activities across web and mobile applications, identify vulnerabilities, and help stakeholders interpret outcomes for risk rating decisions.

Key Responsibilities

• Execute security testing and ethical hacks of web and mobile applications to discover vulnerabilities.
• Conduct manual and automated dynamic security testing to identify issues aligned to the OWASP Top 10.
• Use agentic AI solutions for dynamic security testing.
• Review testing results with stakeholders and contribute to determining risk ratings.
• Develop new techniques and processes to identify application vulnerabilities.
• Assist in the design and implementation of security solutions and continuously enhance information security approaches and methodologies at manager discretion.
• Provide subject matter expertise for security testing capabilities, including manual and automated security testing of applications, infrastructure, and/or platforms.
• Validate vulnerabilities through manual testing.
• Create reports and review test results with stakeholders.
• Provide subject matter expertise and lead and mentor at manager discretion.

Required Qualifications

• 8+ years of industry relevant experience.
• Bachelor’s degree (bachelor’s).
• Experience with Burp Suite.
• Manual application security testing methods.
• Automated dynamic application testing tools.
• Familiarity with the OWASP Top 10 Web Application Security Risks.
• API Security Testing.
• Strong understanding of attack methodologies.
• Experience with cloud environments.
• Roles at this level typically require a university/college degree; higher-level education such as a Master’s degree, PhD, or certifications is desirable.
• Specific certifications are often required; in lieu of a degree, a comparable combination of education, job-specific certification(s), and experience (including military service) may be considered.

Preferred Qualifications

• API Security Testing.
• Strong understanding of attack methodologies.
• Experience with cloud environments.

Technologies and Frameworks

• Burp Suite
• Agentic AI solutions
• OWASP Top 10 Web Application Security Risks

Compensation and Incentives

Base Salary: $112,000.00 – $228,800.00 per year.

Salaries may vary based on geographic location, market data, and individual skills, experience, and education. This role is incentive eligible, with payment based upon company, business, and/or individual performance.

Benefits

• Medical/prescription drug coverage (with a Health Savings Account feature)
• Dental and vision options
• Employee and spouse/child life insurance
• Short and long-term disability protection
• 401(k) with PNC match, pension, and stock purchase plans
• Dependent care reimbursement account
• Back-up child/elder care
• Adoption, surrogacy, and doula reimbursement
• Educational assistance, including select programs fully paid
• Robust wellness program with financial incentives
• Maternity and/or parental leave
• Up to 11 paid holidays each year
• 9 occasional absence days each year, unless otherwise required by law
• Between 15 to 25 vacation days each year, depending on career level and years of service

Application Window

Generally, this opening is expected to be posted for two business days from 07/01/2026, although it may be longer with business discretion.

Disability Accommodations Statement

If an accommodation is required to participate in the application process, contact [email protected] with “accommodation request” in the subject line and include your name, the job ID, and your preferred method of contact. Applicants may also call 877-968-7762 and say “Workday” for accommodation assistance. All information provided will be kept confidential and used only to the extent required to provide needed reasonable accommodations.

EEO Statement

PNC provides equal employment opportunity to qualified persons regardless of race, color, sex, religion, national origin, age, sexual orientation, gender identity, disability, veteran status, or other categories protected by law.

California Residents Notice

Refer to the California Consumer Privacy Act Privacy Notice to gain understanding of how PNC may use or disclose your personal information in its hiring practices.

FDIA/SAFE Act/FINRA Criminal History Statement

This position is subject to requirements of Section 19 of the Federal Deposit Insurance Act (FDIA) and, for any registered role, the Secure and Fair Enforcement for Mortgage Licensing Act of 2008 (SAFE Act) and/or the Financial Industry Regulatory Authority (FINRA), which prohibit the hiring of individuals with certain criminal history.