API Product - Software Security Specialist Senior

PNC•Strongsville, OH

3d•$112,000 - $228,800•Onsite

About The Position

At PNC, the Software Security Specialist Senior works within the Technology organization and is based in Denver, Colorado; Phoenix, Arizona; Birmingham, Alabama; Dallas, Texas; Pittsburgh, Pennsylvania; or Cleveland, Ohio. The role advances and matures the enterprise API Security Program through governance, strategy, risk management, and stakeholder coordination. It drives API discovery, inventory, risk visibility, and remediation across the enterprise, and leads adoption and operationalization of Akamai API Security, including passive findings, active testing, metrics, reporting, and integrations with broader security capabilities. The role partners with Application Security, Security Operations, Data Protection, development teams, and other stakeholders to integrate API Security into existing security and development processes. It establishes sustainable API Security processes, standards, guidance, metrics, and reporting to demonstrate risk reduction and program maturity. More broadly, the position enables developers to create more secure software through coaching, mentoring, subject matter expertise, secure coding standards, and language-specific guidance to prevent or remediate coding flaws. It also manages projects and tasks related to developers. PNC describes this as an in-office role and encourages candidates to discuss workplace expectations with their recruiter and hiring manager. Employment visa sponsorship and STEM OPT participation are not provided for this position. The role is incentive eligible, with payment based on company, business, and/or individual performance.

Requirements

Strong understanding of API security fundamentals and common API architectures.
Knowledge of REST, SOAP, OpenAPI, Postman, and scripting.
Strong understanding of OWASP API Security Top 10 risks, including BOLA, authentication, authorization, and session management.
Typically, 8 or more years of industry-relevant experience for roles at this level.
Bachelor's degree; a comparable combination of education, job-specific certifications, and experience, including military service, may be considered in lieu of a degree.
Demonstrate appropriate knowledge, skills, and abilities for the role.
No required certification is listed.
No required license is listed.

Nice To Haves

Higher education such as a master's degree or PhD is desirable.
Certifications are desirable; specific certifications are often required for roles at this level, but none are listed as required for this position.
Preferred skills include Application Security, Cloud Security, Network Security, Secure Code, Secure Coding, Secure Software Development, Secure Software Development Lifecycle, Security Automation, Security Software, and Software Security.
Competencies include Analytical Thinking, Effective Communications, Information Security Management, Information Security Technologies, IT Environment, IT Standards, Procedures & Policies, Knowledge of Organization, and Problem Solving.

Responsibilities

Own and advance the enterprise API Security Program, including governance, strategy, risk management, and stakeholder coordination.
Drive enterprise API discovery, inventory, risk visibility, and remediation throughout the software development lifecycle.
Lead operationalization and adoption of Akamai API Security, including passive findings, active testing, metrics, reporting, and integrations with broader security capabilities.
Partner with Application Security, Security Operations, Data Protection, development teams, and other stakeholders to integrate API Security into security and development processes.
Establish sustainable API Security processes, standards, guidance, metrics, and reporting to demonstrate measurable risk reduction and program maturity.
Enable developers to create more secure software through coaching, mentoring, and Application Security subject matter expertise.
Work with developers to help them create more secure code.
Manage projects and tasks related to developers.
Set secure coding standards and requirements with the team.
Coach developers on language-specific coding techniques to avoid or remediate coding flaws.
Assess and effectively manage risks associated with business objectives and activities in support of PNC's Enterprise Risk Management Framework.
Apply customer-focused values and practices to prioritize customer needs and satisfaction in business decisions and create customized customer solutions.

Benefits

Medical and prescription drug coverage, with a Health Savings Account feature, for eligible full-time employees.
Dental insurance options.
Vision insurance options.
Employee and spouse/child life insurance.
Short- and long-term disability protection.
401(k) with PNC match.
Pension plan.
Stock purchase plans.
Dependent care reimbursement account.
Back-up child and elder care.
Adoption, surrogacy, and doula reimbursement.
Educational assistance, including select fully paid programs.
Wellness program with financial incentives.
Maternity and/or parental leave, depending on eligibility.
Up to 11 paid holidays each year, depending on eligibility.
9 occasional absence days each year, unless otherwise required by law, depending on eligibility.
Between 15 and 25 vacation days each year depending on career level and years of service, subject to eligibility.