Security Analyst Application Security

Position Overview

Security Analyst – Technical (Multiple locations)

Locations: Pittsburgh, PA; Cleveland, OH; Birmingham, AL; Dallas, TX; Lakewood, CO

Position Number: R214758

Reports to and collaborates within PNC's Technology organization. Responsibilities revolve around providing security analysis, application security evaluation, and assurance integration within the Software Development Life Cycle (SDLC).

Responsibilities

• Provide technical evaluation, analysis and support for security processes and tools to improve overall security posture.
• Apply security concepts, review information, execute defined tasks, analyze requirements, review logs, and create documentation.
• Investigate and mitigate risks and vulnerabilities; develop documentation of findings and recommended actions.
• Advise on security procedures and products for clients, security administrators and network‑operations teams.
• Conduct security assessments and other information security routines consistently, investigating and recommending corrective actions.

Qualifications

• Knowledge of common application security concepts and vulnerability types (e.g., OWASP Top 10).
• Exposure to the Software Development Lifecycle (SDLC) and an interest in how security fits into design, development, and testing activities.
• Strong analytical, problem‑solving and documentation skills, with the ability to analyze information and execute assigned tasks with attention to detail.
• Effective communication skills, able to explain security findings and risks in clear and approachable terms.
• Ability to coach partners on security processes and expectations, supporting consistent and repeatable practices.
• Experience working independently and collaboratively within cross‑functional teams.
• Familiarity with Agile delivery concepts (e.g., Scrum, Kanban).

Preferred Qualifications

• Hands‑on exposure to application security, secure coding concepts, or software development.
• Familiarity with security testing concepts or tools (e.g., vulnerability scanning, SAST/DAST results).
• Knowledge of security frameworks, standards or best practices (e.g., OWASP, NIST).
• Exposure to cloud computing concepts or modern application architectures (APIs, microservices).
• Entry‑level or foundational security certifications (e.g., Security+, GIAC Fundamentals).
• Demonstrated interest in application security, product security or secure software development.
• Strong documentation skills to create clear notes, assessments, evidence for security processes.

Work Experience

3+ years of relevant/direct industry experience, or a comparable combination of education and certification. A bachelor’s degree is preferred.

Education

Bachelor’s degree.

Certifications

No required certifications.

Pay Transparency

Base Salary: $55,000.00 – $128,800.00 (varies by location, skills, experience).

Benefits

Medical/prescription drug coverage, dental and vision options, life insurance for employee and spouse/child, short‑term and long‑term disability protection, 401(k) with match, pension and stock purchase plans, dependent care reimbursement, and additional benefits such as adoption, education assistance, and wellness programs.

Disability Accommodations Statement

If an accommodation is required to participate in the application process, please contact AccommodationRequest@pnc.com or call 877‑968‑7762.

Equal Employment Opportunity (EEO) Statement

PNC provides equal employment opportunity to qualified persons regardless of race, color, sex, religion, national origin, age, sexual orientation, gender identity, disability, veteran status or other protected categories. The position is subject to FDIA, SAFE Act and/or FINRA requirements.