Application Security Analyst (SAST)

PNC•Strongsville, OH

8d•$75,000 - $137,500•Onsite

About The Position

At PNC, the Application Security Analyst will work within the Technology Security organization. This role is suited to a developer looking to transition into application security and is based in Denver, Colorado; Phoenix, Arizona; Birmingham, Alabama; Dallas, Texas; Pittsburgh, Pennsylvania; or Cleveland, Ohio. PNC describes itself as an in-office company and encourages candidates to discuss workplace expectations with their recruiter and hiring manager. The analyst reviews source code to identify vulnerabilities through static application security testing (SAST), works with development teams to onboard applications to PNC’s platform, and uses AI and non-AI tools to support the SAST process. The role provides technical evaluation and analysis and supports the activities, processes, and tools used to improve the organization’s security posture. It applies security concepts, analyzes information and requirements, reviews logs, documents findings, investigates data security issues, helps mitigate risks and vulnerabilities, and reviews and defines controls. The analyst also advises on more complex security procedures and products, participates in enforcing security controls, shares knowledge with staff, conducts security assessments, and recommends corrective actions in line with established guidelines. The position requires customer focus and effective management of risks in support of PNC’s Enterprise Risk Management Framework. The stated base salary range is $75,000 to $137,500, with incentive eligibility based on company, business, and/or individual performance. PNC will not provide employment visa sponsorship or participate in STEM OPT for this position.

Requirements

Typically requires a university or college degree and 3 or more years of relevant or direct industry experience.
A comparable combination of education, job-specific certifications, and experience, including military service, may be considered in place of a degree.
Demonstrate appropriate knowledge, skills, and abilities for the role.
Relevant competencies include analytical thinking, effective communications, information assurance, information security management and technologies, IT environment, IT standards, procedures and policies, IT systems management, problem solving, and software security assurance.
No required certification or license is specified.

Nice To Haves

Certifications are often desired.
Preferred skills include cyber threat intelligence, data security, fraud prevention, information security, intrusion detection, network security, security audit, security evaluations, security operations, and vulnerability assessments.

Responsibilities

Review source code to identify code-level vulnerabilities using SAST.
Work with development teams to onboard applications to the platform.
Use AI and non-AI tooling to assist with the SAST process.
Provide technical evaluation and analysis to support the organization’s security posture.
Apply security concepts, review information, execute defined tasks, analyze requirements, review logs, and create documentation.
Perform investigations and data security activities, including data loss prevention, data manipulation, and coordination of activities.
Take actions to address or mitigate risks and vulnerabilities; review and define controls.
Advise on more complex security procedures and products for clients, security administrators, and network operations.
Participate in enforcing controls to address security risks and threats, as assigned at manager discretion.
Share knowledge with staff.
Conduct security assessments and other information security routines consistently.
Investigate data security matters and recommend corrective actions in accordance with established guidelines.
Assess and manage risks associated with business objectives and activities in support of PNC’s Enterprise Risk Management Framework.

Benefits

Medical and prescription drug coverage, including a Health Savings Account feature, subject to eligibility.
Dental and vision options.
Employee and spouse/child life insurance.
Short- and long-term disability protection.
401(k) with PNC match.
Pension and stock purchase plans.
Dependent care reimbursement account.
Back-up child and elder care.
Adoption, surrogacy, and doula reimbursement.
Educational assistance, including select fully paid programs.
Wellness program with financial incentives.
Maternity and/or parental leave, subject to eligibility.
Up to 11 paid holidays each year, subject to eligibility.
9 occasional absence days each year, unless otherwise required by law.
15 to 25 vacation days each year depending on career level and years of service, subject to eligibility.
Incentive compensation based on company, business, and/or individual performance.