Security Testing Specialist Sr - Application Security

PNC’s Technology Security organization is looking for a senior specialist to strengthen application security through rigorous dynamic testing within a focused release window. In this role, you will help validate web and mobile deployments using both manual and automated techniques, with findings used to shape risk ratings and inform next-step security improvements.

This position is based in Birmingham, AL and is performed onsite. The annual base salary range is USD 112,000 to 228,800, and the role is incentive eligible based on company, business, and/or individual performance.

What you will do

• Execute security testing and ethical hacks of web and mobile applications to discover vulnerabilities.
• Run manual and automated dynamic security testing to identify OWASP Top 10 vulnerabilities.
• Utilize Agentic AI solutions for dynamic security testing.
• Review testing results with stakeholders and support the process for determining risk ratings.
• Develop new techniques and processes to improve detection of application vulnerabilities.
• Provide subject matter expertise for security testing capabilities, including manual and automated security testing across applications, infrastructure, and/or platforms.
• Create reports and conduct results reviews with stakeholders.
• Assist in the design and implementation of security solutions and help continuously enhance information security approaches and methodologies at manager discretion.
• Lead and mentor at manager discretion while providing ongoing expertise.

Required background

• Experienced application security tester with 8+ years of industry-relevant experience.
• Experience with Burp Suite, manual application security testing methods, and automated dynamic application testing tools.
• Familiarity with OWASP Top 10 Web Application Security Risks.
• API security testing.
• Strong understanding of attack methodologies.
• Experience with cloud environments.
• Education: Bachelors (roles at this level typically require a university/college degree).
• No required certification(s) or license(s) listed for this role.
• In lieu of a degree, a comparable combination of education, job-specific certification(s), and experience (including military service) may be considered.

Preferred qualifications

• API Security Testing.
• Strong understanding of attack methodologies.
• Experience with cloud environments.

Helpful skills and focus areas

• Access Control (AC)
• Application Security Testing
• Building Architecture
• Customer Solutions
• Disaster Recovery Planning
• Information Security
• Network Security
• Physical Security
• Risk Assessments
• Security Technologies
• Web Application Security Testing

Additional details

• Application window: expected to be posted for two business days starting around 07/01/2026, though it may extend with business discretion.
• Compensation transparency: base salary $112,000.00 to $228,800.00; final salaries may vary based on geographic location, market data, and individual skills, experience, and education.
• Pay incentives: incentive eligible based on company, business, and/or individual performance.
• Visa/STEM OPT: PNC will not provide sponsorship for employment visas or participate in STEM OPT for this position.

Benefits

• Medical/prescription drug coverage with a Health Savings Account feature
• Dental and vision options
• Employee and spouse/child life insurance
• Short- and long-term disability protection
• 401(k) with PNC match, pension, and stock purchase plans
• Dependent care reimbursement account
• Back-up child/elder care
• Adoption, surrogacy, and doula reimbursement
• Educational assistance, including select programs fully paid
• Robust wellness program with financial incentives
• Maternity and/or parental leave
• Up to 11 paid holidays each year
• 9 occasional absence days each year (unless otherwise required by law)
• Between 15 and 25 vacation days each year, depending on career level

Disability accommodations

• To request an accommodation for the application process, contact [email protected] with subject line including “accommodation request” and include your name, job ID, and preferred method of contact.
• Applicants may also call 877-968-7762 and say “Workday” for accommodation assistance.
• All information provided will be kept confidential and used only to the extent required to provide needed reasonable accommodations.

California resident notice

• Refer to the California Consumer Privacy Act (CCPA) Privacy Notice to understand how PNC may use or disclose personal information in hiring practices.

Technologies in scope: Burp Suite, Agentic AI