Application Security Analyst

PNC Bank • Pittsburgh, PA

2d • Onsite

About The Position

PNC is hiring a Security Analyst within its Technology organization, based in Denver, Colorado; Phoenix, Arizona; Birmingham, Alabama; Dallas, Texas; Pittsburgh, Pennsylvania; or Cleveland, Ohio. The role provides technical evaluation and analysis and supports activities, processes, and tools that improve the organization’s security posture. It applies security concepts, reviews information, executes defined tasks, analyzes requirements, reviews logs, and creates documentation. The position also involves investigations, data loss prevention, data manipulation, coordinating activities, and actions to address or mitigate risks and vulnerabilities.

The analyst reviews and defines controls, participates in enforcing controls against security risks and threats, conducts security assessments and recurring information security routines, and investigates and recommends corrective actions for data security issues. The role advises on more complex security procedures and products for clients, security administrators, and network operations, and shares knowledge with staff. The ideal candidate can explain findings and risks clearly, support remediation under guidance, and work independently as well as with cross-functional partners.

PNC describes itself as an in-office company and encourages candidates to discuss workplace expectations with their recruiter and hiring manager. The role is incentive eligible. PNC will not sponsor employment visas or participate in STEM OPT for this position.

Requirements

• Knowledge of common application security concepts and vulnerability types, such as the OWASP Top 10, and ability to learn their application in real-world systems.
• Exposure to the Software Development Lifecycle (SDLC) and interest in how security fits into design, development, and testing.
• Ability to analyze information, follow defined security processes, and complete assigned security tasks with attention to detail.
• Strong analytical and problem-solving skills to identify potential risks and support remediation under guidance.
• Effective communication skills, including explaining security findings, vulnerabilities, and risks clearly to technical and non-technical partners.
• Ability to work independently and collaboratively within cross-functional teams.
• Familiarity with Agile delivery concepts such as Scrum or Kanban.
• Typically, a university or college degree and 3 or more years of relevant or direct industry experience; a comparable combination of education, job-specific certifications, and experience may be considered in lieu of a degree.
• Bachelor’s degree listed under education requirements.

Nice To Haves

• Hands-on exposure to application security, secure coding concepts, or software development.
• Familiarity with security testing concepts or tools, such as vulnerability scanning results or SAST/DAST outputs.
• Knowledge of security frameworks, standards, or best practices such as OWASP or NIST, or strong interest in developing that knowledge.
• Exposure to cloud computing concepts or modern application architectures such as APIs and microservices.
• Entry-level or foundational security certifications, such as Security+ or GIAC Fundamentals, or progress toward a relevant certification.
• Demonstrated interest in application security, product security, or secure software development through academic projects, personal learning, or prior roles.
• Strong documentation skills for creating clear notes, assessments, and evidence supporting security processes and controls.
• Skills in cyber threat intelligence, data security, fraud prevention, information security, intrusion detection, network security, security audit, security evaluations, security operations, or vulnerability assessments.

Responsibilities

• Provide technical evaluation and analysis.
• Support activities, processes, and tools that improve the organization’s overall security posture.
• Apply security concepts, review information, execute defined tasks, analyze requirements, review logs, and create documentation.
• Perform investigations, data loss prevention, data manipulation, and coordination of activities.
• Take actions to address or mitigate risks and vulnerabilities.
• Review and define controls, and participate in enforcing controls against security risks and threats.
• Advise on more complex security procedures and products for clients, security administrators, and network operations.
• Share knowledge with staff and coach or educate partners on security processes and expectations.
• Conduct security assessments and other information security routines consistently.
• Investigate data security issues and recommend corrective actions in accordance with established guidelines.
• Communicate security findings, vulnerabilities, and risks to developers, product managers, and non-security partners.
• Work independently on assigned tasks and collaboratively within cross-functional teams.

Benefits

• Medical and prescription drug coverage, with a Health Savings Account feature.
• Dental and vision options.
• Employee and spouse/child life insurance.
• Short- and long-term disability protection.
• 401(k) with PNC match.
• Pension and stock purchase plans.
• Dependent care reimbursement account.
• Back-up child and elder care.
• Adoption, surrogacy, and doula reimbursement.
• Educational assistance, including select programs that are fully paid.
• Wellness program with financial incentives.
• Maternity and/or parental leave.
• Up to 11 paid holidays each year.
• 9 occasional absence days each year, unless otherwise required by law.
• Between 15 and 25 vacation days each year, depending on career level and years of service.

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level