Security Engineer - Cloud Security Controls

PNC Financial Services Group is hiring a security engineer to strengthen cloud defenses across public cloud workloads. This role sits on PNC’s Cloud Security team and focuses on building, testing, and deploying security controls for Azure and AWS, working in close partnership with cloud architects and operational security groups.

Based in Birmingham, AL, this onsite position supports security assessment and control delivery using CSPM capabilities and security-as-code practices within CI/CD workflows.

What you’ll do

• Build and test security controls for Azure resources and AWS services.
• Validate control effectiveness and promote approved controls to production workloads.
• Engineer and configure CSPM tooling to analyze and assess cloud workloads for compliance in a CI/CD environment.
• Assess, implement, automate, and document security solutions and processes for Microsoft Azure and AWS.
• Provide analysis of workloads to help ensure alignment with operational security requirements before production deployment.
• Collaborate with the Cloud Security Product Owner to refine backlog tickets and help define priority and sizing.
• Automate and orchestrate cloud software deployment via CI/CD so enterprise security standards, policies, configurations, and architectures are integrated for applications, platforms, and infrastructure.
• Assist DevOps team members with development and operationalization of security.
• Help ensure the security posture of applications seeking deployment into production.
• Serve as a subject matter expert for applying security concepts and maintaining technology solutions, including deliverables aligned to project timelines.
• Work with architecture to translate high-level designs into implementation details, including sizing, integration details, onboarding, and operationalization.
• Evaluate patches, updates, and ongoing maintenance impacts, using change control and governance processes to align solutions with new standards.
• Develop detailed implementation, configuration, design, and engineering documentation, and build and implement solutions.
• Partner with operational teams to support day-to-day transition and operational readiness.
• Provide engineering support for existing production technology and collaborate with other groups as needed.

Required qualifications

• Deep experience with AWS and/or Azure cloud services in an enterprise environment.
• Thorough understanding of cloud security best practices.
• Experience conducting security gap analysis on cloud services or cloud infrastructure.
• Experience implementing security controls for public cloud workloads in Azure and AWS.
• Experience creating security solutions that balance security needs with other corporate priorities.
• Proficiency in one or more scripting languages such as Python, PowerShell, Bash, etc.
• Expertise with Git, including branching workflows.
• Experience testing security controls to ensure effectiveness.
• Strong written and verbal communication skills.
• Process and detail oriented.
• Demonstrated project leadership, helping guide direction of large team initiatives.
• Ability to consider approaches for security controls at scale across multiple cloud service providers.
• Expertise in SQL or SQL-type query languages.
• Typically requires a university or college degree and 5+ years of industry-relevant experience.
• In lieu of a degree, a comparable combination of education, job-specific certification(s), and experience may be considered.
• Bachelors

Preferred qualifications

• Azure Fundamentals - AZ-900
• Azure Security Engineer Associate - AZ-500
• AWS Cloud Security Engineer

Technologies you’ll work with

• Azure, AWS
• Cloud Security Posture Management (CSPM) tools
• Security as Code (SAC) pipeline
• CI/CD
• Infrastructure as Code (IAC) teams
• Python, PowerShell, Bash
• Git
• SQL and SQL-type query languages
• Azure Fundamentals - AZ-900
• Azure Security Engineer Associate - AZ-500
• AWS Cloud Security Engineer

Base salary range

USD 91,000 - 185,900 per year.

Benefits

• Medical/prescription drug coverage with a Health Savings Account feature
• Dental and vision options
• Employee and spouse/child life insurance
• Short- and long-term disability protection
• 401(k) with PNC match
• Pension
• Stock purchase plans
• Dependent care reimbursement account
• Back-up child/elder care
• Adoption, surrogacy, and doula reimbursement
• Educational assistance, including select programs fully paid
• Robust wellness program with financial incentives
• Maternity and/or parental leave
• Up to 11 paid holidays each year
• 9 occasional absence days each year, unless otherwise required by law
• Between 15 to 25 vacation days each year, depending on career level
• Disability Accommodations Statement: reasonable accommodations to employment applicants and qualified individuals with a disability who need an accommodation to perform the essential functions of their positions

Application window

Generally expected to be posted for two business days from 05/11/2026, though it may be extended with business discretion.