Technology Engineer - Application Security (JAVA/.NET)

Benefits

• Medical and prescription drug coverage with a Health Savings Account option
• Dental and vision coverage
• Life insurance for employees and their spouse/children
• Short and long term disability protection
• 401(k) with company match, pension and stock purchase plans
• Dependent care reimbursement account
• Back-up child and elder care
• Adoption, surrogacy, and doula reimbursement
• Educational assistance, including fully paid programs
• Wellness program with financial incentives
• Maternity and or parental leave
• Up to 11 paid holidays each year
• 9 occasional absence days each year
• 15 to 25 vacation days per year

Position overview

This Technology Engineer specializes in application security at PNC, focusing on identifying and mitigating security risks throughout the software development lifecycle with Java and or .NET experience. The role is onsite in Birmingham, AL, with collaboration across teams in Pittsburgh, PA; Cleveland, OH; Dallas, TX; or Lakewood, CO as applicable.

Responsibilities

• Communicate effectively, both verbally and in writing, to convey security guidance
• Identify, evaluate, and mitigate application security risks across the SDLC
• Leverage a software development background in Java and/or .NET
• Apply comprehensive knowledge of application security within software development
• Maintain practical understanding of the OWASP Top 10 web risks and advise on mitigation strategies
• Triaging and remediation of web application security vulnerabilities
• IAST familiarity is preferred but not required
• Incident response experience related to application attacks is advantageous
• Manually validate compensating controls when direct remediation is not immediately possible
• Collaborate with application and engineering teams to promote secure coding practices
• Analyze and validate vulnerabilities, distinguish true attacks from false positives, and assist remediation
• Use technical knowledge to design, build, and maintain technology solutions, including platform selection and configuration
• Develop software components and hardware for new and emerging technology projects aligned with business goals
• Provide guidance on common issues and best practices for junior staff when applicable
• Conduct systematic analysis of client requirements within a traceability framework and address functional problems
• Ensure the quality of project deliverables and adherence to standards and processes

Requirements

• Strong verbal and written communication skills
• Ability to identify, evaluate, and mitigate application security risks across the SDLC
• Software development background in Java and/or .NET
• Demonstrated experience in software development with knowledge of application security
• Understanding of OWASP Top 10 risks and practical mitigation guidance
• Proficiency in triaging and remediating web application security vulnerabilities
• IAST familiarity preferred but not mandatory
• Experience in incident response related to application attacks is a plus
• Ability to manually validate compensating controls when remediation is not possible
• Strong collaboration with application and engineering teams to promote secure coding practices
• Experience analyzing and validating software vulnerabilities and distinguishing true attacks from false positives
• Capability to design, build, and maintain technology solutions, including platform selection and configuration
• Develop software components for emerging technology projects
• Provide guidance to junior staff on common issues and best practices when applicable
• Systematic analysis of client requirements within a traceability framework
• Commitment to delivering high-quality work in line with standards

Technologies

• Java
• .NET

Salary and location

Base salary range is USD 86,250 to 158,125 per year. Salaries may vary by geographic location, market data, and individual skills, experience, and education. This role is onsite in Birmingham, AL. This position is incentive eligible with payment based on company, business and individual performance.