Cloud Security Engineer

PNC’s Technology organization is hiring a Cloud Security Engineer to help strengthen cloud security capabilities across Azure, AWS, and Palo Alto. In this onsite role in Lakewood, CO, you will own key vendor and control responsibilities, enable CNAPP-related functions, and contribute to cloud security visibility through Microsoft PowerBI.

The position sits within a broader environment where you partner with technical control owners, support evaluation and adoption of cloud security solutions, and maintain recurring control assessment activities tied to RCSA Control TEC083. You will also build and maintain dashboard views used by stakeholders to understand Azure and AWS configuration violations.

Location and employment details

• Location: Lakewood, CO (onsite)
• Base salary: USD $91,000 - $185,900 per yearly
• Experience: 5+ years
• Education: Bachelor’s degree
• Application window: Expected to be posted for two business days from 07/27/2026 (may be longer with business discretion)
• Pay transparency: Salaries may vary based on geographic location, market data, individual skills, experience, and education. This role is incentive eligible based on company, business, and/or individual performance.

Summary of the role

• Security Engineer within PNC’s Technology organization
• Based in Pittsburgh, PA; Cleveland, OH; Birmingham, AL; Dallas, TX; or Denver, CO
• Own key cloud security vendor and control responsibilities across Azure, AWS, and Palo Alto
• Enable CNAPP-related capabilities and manage RCSA control ownership (TEC083)
• Provide recurring attestation evidence and review/analyze TEC083 on an ongoing basis
• Develop Cloud Security dashboard views using Microsoft PowerBI

Responsibilities

• Partner with teams that own technical controls that either Cortex Cloud provides, and support evaluation and testing to determine fit and reduce tool sprawl
• Build proactive relationships with vendors, partners, and stakeholders
• Provide partners with appropriate access to lower environments for testing and analysis
• Develop and maintain vendor relationships to ensure appropriate response and support for evaluating new capabilities
• Work with Enterprise Architecture (EA) to obtain approvals through PNC processes to enable new capabilities that improve cloud security posture
• Champion issues and challenges with vendors and hold them accountable for correcting problems and bugs that impact delivery
• Plan and lead Quarterly Business Review (QBR)
• Own RCSA Control TEC083 for Cloud Security
• Provide recurring attestation evidence for each Cloud Security Control and determine if gaps exist or if net new controls are needed
• Assess whether existing controls are no longer applicable or should belong to a different RAU
• Work with the Cloud Security team to automate attestation evidence, including determining whether manually obtained evidence can be automated
• Build Cloud Security dashboard UI in Microsoft PowerBI to support stakeholders, partners, and the business viewing Azure and AWS configuration violations
• Provide statistics on dashboard usage
• Engage customers to capture requirements and build a backlog of capabilities for the Cloud Security Roadmap
• Provide subject matter expertise applying security concepts; design, build, and maintain technology solutions; support deliverables tied to project timelines
• Collaborate with architecture to determine implementation specifics including sizing, integration details, onboarding, and operationalization
• Evaluate patches, updates, and ongoing maintenance; determine impacts when new standards are implemented using change control and governance processes
• Develop detailed implementation, configuration, design, and engineering documentation and build/implement solutions
• Work with operational partners to enable transition and day-to-day supportability
• Provide engineering support for production environments and collaborate with other groups as needed; seek opportunities to expand knowledge beyond core specialty

Requirements

• Ability to work with ambiguity
• Comfort with creative approaches to move four key pillars forward: enabling CNAPPs, VRO ownership, serving as RCSA Control Owner, and Cloud Security Dashboard development
• Strong relationship-building and maintenance skills
• Ability to understand customer needs
• Ability to influence partners to adopt CNAPP capabilities
• Technical skills with a high-level understanding of CNAPP, controls, and dashboard development
• Preferred: working knowledge with at least one CNAPP such as AWS, Azure, or Palo Alto
• Typically requires a university/college degree and 5+ years of industry-relevant experience
• Specific certifications are often required; in lieu of a degree, a comparable combination of education, job-specific certification(s), and experience (including military service) may be considered
• Preferred skills: Access Control (AC), Building Architecture, Customer Solutions, Disaster Recovery Planning, Information Security, Network Security, Physical Security, Risk Assessments, Security Technologies
• Competencies: Analytical Thinking, Effective Communications, Information Security Management, Information Security Technologies, IT Environment, IT Standards, Procedures & Policies, IT Systems Management, Network and Internet Security, Problem Solving, Technical Troubleshooting
• Education: Bachelors
• Certifications: No Required Certification(s)
• Licenses: No Required License(s)

Technologies

• Cortex Cloud
• Azure
• AWS
• Palo Alto
• Microsoft PowerBI
• CNAPPs

Benefits

• Medical/prescription drug coverage (with a Health Savings Account feature)
• Dental and vision options
• Employee and spouse/child life insurance
• Short and long-term disability protection
• 401(k) with PNC match, pension and stock purchase plans
• Dependent care reimbursement account
• Back-up child/elder care
• Adoption, surrogacy, and doula reimbursement
• Educational assistance, including select programs fully paid
• Robust wellness program with financial incentives
• Maternity and/or parental leave
• Up to 11 paid holidays each year
• 9 occasional absence days each year, unless otherwise required by law
• Between 15 to 25 vacation days each year, depending on career level
• Years of service

Disability accommodations

• To request an accommodation for the application process, contact [email protected] and include “accommodation request” in the subject line, plus your name, job ID, and preferred method of contact in the email body.
• Applicants may also call 877-968-7762 and say “Workday” for accommodation assistance.
• All information provided will be kept confidential and used only to the extent required to provide needed reasonable accommodations.

Equal employment opportunity

PNC provides equal employment opportunity to qualified persons regardless of race, color, sex, religion, national origin, age, sexual orientation, gender identity, disability, veteran status, or other categories protected by law.