Technology Engineer - Application Security (JAVA/.NET)

PNC Financial Services Group is seeking a Technology Engineer who specializes in application security. This onsite role in Birmingham, Alabama focuses on identifying and mitigating security risks across the software development lifecycle, with hands-on development experience in Java and/or .NET to strengthen the security posture of banking applications.

Responsibilities

• Communicate clearly, both verbally and in writing, to collaborate with teams across the organization.
• Identify, evaluate, and mitigate application security risks throughout the full software development lifecycle (SDLC).
• Maintain a software development background with preferred experience in Java and/or .NET.
• Demonstrate development experience together with comprehensive knowledge of application security.
• Stay current on OWASP Top 10 web application risks and provide guidance on mitigations to relevant teams.
• Triaging and remediation of web application security vulnerabilities.
• IAST familiarity is a plus but not required.
• Incident response experience related to application attacks is advantageous.
• Manually validate compensating controls when direct remediation is not immediately possible.
• Collaborate with application and engineering teams to promote secure coding practices.
• Analyze and manually validate software vulnerabilities, distinguishing legitimate attacks from false positives and guiding remediation accordingly.
• Leverage technical knowledge to design, build, and maintain technology solutions; assist with platform selection and configuration.
• Develop software components and hardware for new and emerging technology projects, aligned with business objectives.
• Provide guidance on common issues and best practices for junior staff when applicable.
• Perform systematic analysis of client requirements within a traceability framework and resolve functional problems.
• Ensure the quality of project deliverables while maintaining compliance with standards and processes.

Requirements

• Strong verbal and written communication skills.
• Identify, evaluate, and mitigate application security risks across the SDLC.
• Software development background in Java and/or .NET.
• Demonstrated development experience with knowledge of application security.
• Understanding of OWASP Top 10 risks and mitigation guidance.
• Proficiency in triaging and remediating web application security vulnerabilities.
• IAST familiarity preferred but not mandatory.
• Experience in incident response pertaining to application attacks is an advantage.
• Ability to manually validate compensating controls when direct remediation is not possible.
• Ability to collaborate with application and engineering teams to promote secure coding practices.
• Experience analyzing and validating software vulnerabilities and distinguishing true attacks from false positives.
• Capability to design, build, and maintain technology solutions; platform selection and configuration.
• Ability to develop software components for emerging technology projects.
• Consultation on common issues and best practices for junior staff when applicable.
• Systematic analysis of client requirements within a traceability framework.
• Ability to ensure quality of project deliverables and compliance with standards.

Technologies

• Java
• .NET

Benefits

• Medical and prescription drug coverage with Health Savings Account feature
• Dental and vision coverage
• Life insurance for employee and dependents
• Short- and long-term disability protection
• 401(k) with PNC match, pension and stock purchase plans
• Dependent care reimbursement account
• Backup child/elder care
• Adoption, surrogacy, and doula reimbursement
• Educational assistance, including fully paid programs
• Wellness program with financial incentives
• Maternity and parental leave
• Up to 11 paid holidays each year
• 9 occasional absence days each year
• 15-25 vacation days each year

Pay Transparency

Base Salary: $86,250.00 – $158,125.00; Salaries may vary based on geographic location, market data and on individual skills, experience, and education. This role is incentive eligible with the payment based upon company, business and/or individual performance.

Application Window

Generally, this opening is expected to be posted for two business days from 07/14/2026, although it may be longer with business discretion.

Disability Accommodations

If an accommodation is required to participate in the application process, please contact us via email at [email protected]. Please include "accommodation request" in the subject line title and be sure to include your name, the job ID, and your preferred method of contact in the body of the email. Emails not related to accommodation requests will not receive responses. Applicants may also call 877-968-7762 and say "Workday" for accommodation assistance. All information provided will b

Equal Employment Opportunity

PNC provides equal employment opportunity to qualified persons regardless of race, color, sex, religion, national origin, age, sexual orientation, gender identity, disability, veteran status, or other categories protected by law.

California Residents

Refer to the California Consumer Privacy Act Privacy Notice to gain understanding of how PNC may use or disclose your personal information in our hiring practices.