Software Security Specialist Sr - Application Security

PNC • Pittsburgh, PA

78d • $80,000 - $185,150

About The Position

At PNC, our people are our greatest differentiator and competitive advantage in the markets we serve. We are all united in delivering the best experience for our customers. We work together each day to foster an inclusive workplace culture where all of our employees feel respected, valued and have an opportunity to contribute to the company's success. As a Software Engineer within PNC's Technology organization, you will be based in Pittsburgh, PA; Cleveland, OH; Birmingham, AL or Dallas, TX. This position is primarily based in a location within PNC's footprint.

Requirements

• Deep expertise guiding development teams in remediating common application vulnerabilities, including OWASP Top 10, API security, and secure design principles.
• Proven hands-on experience performing threat modeling to identify and mitigate risks in software.
• Practical experience building and implementing strong authentication solutions.
• A genuine passion for secure software development, with the ability to clearly articulate its importance.
• Strong analytical skills to identify gaps in the Software Development Lifecycle (SDLC) and recommend actionable improvements.
• Hands-on experience with secure design, security architecture, and implementing software security solutions.
• Ability to work both independently and collaboratively within cross-functional teams.
• Familiarity with Agile development methodologies (e.g., Scrum, Kanban).
• Experience with SAST, DAST, RASP, and integrating security into CI/CD pipelines.

Nice To Haves

• Hands-on experience with secure coding and secure by design practices.
• Knowledge of software security frameworks such as BSIMM or SAMM.
• Strong technical skills in application security, product security.
• Relevant certifications such as CSSLP, SANS GWAPT.
• Experience securing public cloud environments (e.g., AWS, Azure, GCP).
• Background in software development.
• Familiarity with tools like SD Elements or similar platforms.
• Ability to define and track security metrics and reporting.
• Proven hands-on experience designing, building, and securing AI systems in production environments.
• Led or contributed to a Security Champions program to promote secure development practices and foster cross-functional security awareness.

Responsibilities

• Responsible for enabling developers to create more secure software through coaching and mentoring developers and provides subject matter expertise to Application Security programs.
• Works with developers to help them create more secure code.
• Manages projects and tasks related to developer.
• Sets secure coding standards and requirements with team.
• Coaches developers on language specific coding techniques to avoid or remediate coding flaws.

Benefits

• Medical/prescription drug coverage (with a Health Savings Account feature).
• Dental and vision options.
• Employee and spouse/child life insurance.
• Short and long-term disability protection.
• 401(k) with PNC match, pension and stock purchase plans.
• Dependent care reimbursement account.
• Back-up child/elder care.
• Adoption, surrogacy, and doula reimbursement.
• Educational assistance, including select programs fully paid.
• A robust wellness program with financial incentives.
• Maternity and/or parental leave.
• Up to 11 paid holidays each year.
• 8 occasional absence days each year, unless otherwise required by law.
• Between 15 to 25 vacation days each year, depending on career level and years of service.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Industry: Credit Intermediation and Related Activities
• Education Level: Bachelor's degree