Technology Engineer - Application Security (JAVA/.NET)

PNC Financial Services Group is seeking a Technology Engineer with a focus on application security, emphasizing Java and .NET. This role involves identifying risks across the software development lifecycle, guiding secure coding practices, and helping development teams strengthen the security posture of critical applications from lakewood onsite operations in Colorado.

Location

Lakewood, CO (onsite)

Responsibilities

• Communicate effectively in both verbal and written form.
• Identify, evaluate, and mitigate application security risks across the full SDLC.
• Apply a software development background, preferably in Java and/or .NET.
• Demonstrate software development experience with thorough knowledge of application security.
• Maintain a practical understanding of the OWASP Top 10 web application risks and guide mitigation strategies to relevant teams.
• Triaging and remediation of web application security vulnerabilities.
• IAST familiarity is preferred but not mandatory.
• Experience in incident response related to application attacks is advantageous.
• Manually validate compensating controls to ensure vulnerabilities are addressed when direct remediation is not immediately possible.
• Collaborate with application and engineering teams to promote secure coding practices and enhance overall security posture.
• Analyze and manually validate software vulnerabilities, distinguish legitimate attacks from false positives, and coordinate remediation with application teams.
• Leverage technical knowledge to design, build, and maintain technology solutions; assist with platform selection, integration, and configuration.
• Develop software components and hardware for new and emerging technology projects, aligning with business strategies and objectives.
• Provide guidance to junior staff on common issues and best practices.
• Offer systematic analysis of client requirements within a traceability framework and resolve functional problems.
• Ensure the quality of project deliverables while maintaining compliance with standards and processes.

Requirements

• Strong verbal and written communication skills.
• Identify, evaluate, and mitigate application security risks across the SDLC.
• Software development background, preferably in Java and/or .NET.
• Demonstrated software development experience with comprehensive knowledge of application security.
• Thorough understanding of OWASP Top 10 web application risks and the ability to guide mitigation efforts.
• Proficiency in triaging and remediating web application security vulnerabilities.
• IAST familiarity is preferred.
• Experience in incident response related to application attacks.
• Manually validate compensating controls to ensure effective addressing of vulnerabilities when immediate remediation is not possible.
• Collaborate with application and engineering teams to promote secure coding practices.
• Analyze and manually validate software vulnerabilities; distinguish legitimate attacks from false positives and coordinate remediation.
• 3+ years of relevant or direct industry experience.
• In lieu of a degree, a comparable combination of education, job-specific certifications, and experience may be considered.
• Bachelor's degree.

Technologies

• Java
• .NET
• IAST

Benefits

• Medical and prescription drug coverage with a Health Savings Account feature.
• Dental and vision coverage options.
• Life insurance for employee and eligible dependents, plus short and long-term disability protection.
• 401(k) with company match, pension opportunities, and stock purchase plans.
• Dependent care reimbursement and backup child/elder care benefits.
• Adoption, surrogacy, and doula reimbursement support.
• Educational assistance, including fully paid programs in select cases.
• Wellness program with financial incentives.
• Maternity and parental leave options.
• Up to 11 paid holidays each year and 9 occasional absence days.
• Between 15 and 25 vacation days annually, depending on career level.

Compensation

Base Salary: $86,250.00 – $158,125.00 per year. Salaries may vary by geographic location, market data, and individual skills, experience, and education. This role is incentive eligible based on company, business, and/or individual performance.