Security Specialist Senior

Position Overview

At PNC, our people are our greatest differentiator and competitive advantage in the markets we serve. As a Security Specialist Senior within PNC's Cloud Security organization, you will be based in Pittsburgh, PA;
Strongsville, OH;
Dallas, TX; or Birmingham, AL.

PNC’s Cloud Security Development team is looking for a candidate who has deep technical capabilities and direct implementation experience developing products and reporting for cloud security configuration management and compliance in both AWS and Azure with native and 3rd‑party tooling. This role is looking for a hands‑on keyboard individual who can both independently deliver and develop enhancements to our team’s product suite as well as provide coaching on security and development guidelines.

You will work closely with partner security engineering and application teams to understand, implement, and develop security tooling related to cloud infrastructure security posture analysis and correction. You will also guide them to understand the build, deployment, and dependency requirements for their systems and advise on best practices for developing secure infrastructure. You will create security automation as the senior most member of a team to assess, monitor, and correct the provisioning and deployment of cloud infrastructure across the enterprise both at deployment (via IaC checks) and runtime.

You will provide mentorship to a group of developers with regard to sustainable development, testing, and software practices. You will design and write clean, well‑architected code, tests, and automation to support the cloud compliance program.

• Development, Dev Ops, and Security experience with two or more public cloud technologies.
• Knowledge and understanding of IT architectures, distributed systems, and microservices.
• Experience with programming languages and writing automation (Python).
• Experience with serverless functions (Azure Function, AWS Lambda).
• Experience with relational databases (SQL).
• Knowledge and experience with containerization (Docker, Kubernetes, Open Shift).
• Knowledge and experience with CI/CD and Dev Ops tools (Git, Jenkins, Groovy, Make, Terraform).
• Knowledge and experience with Security / Dev Sec Ops  tools.
• Knowledge and experience with Cloud Security Posture Management tools (Azure Policy, AWS Config, Prisma Cloud, AWS SCP).
• Outstanding troubleshooting/problem‑solving abilities.
• Experience working with relevant cloud security frameworks/guidelines (CSA CCM, PCI Cloud Supplement, ISACA Cloud Computing Audit, CIS, NIST).
• Inquisitive and resourceful – not afraid to network within the organization to ask relevant questions.
• Excellent verbal and written communication skills – ability to explain complex concepts to a wide variety of individuals with varying technical skills.
• Interaction with project management team members and key stakeholders on application projects.
• Ability to handle sensitive and confidential information appropriately.

• Provides technical evaluation and analysis in a specific security area. Supports activities, processes, and tools needed to improve overall security posture of the organization. Primary responsibilities do not include architect or engineering duties; provides subject matter expertise.
• Applies security concepts, reviews information, executes defined tasks, analyzes requirements, reviews logs, creates documentation. Performs investigation and data loss prevention, data manipulation, and coordination of activities. Performs actions to address or mitigate risks and vulnerabilities. Reviews and defines controls.
• Advises on more complex security procedures and products for clients, security administrators, and network operations. Participates in enforcement of control security risks and threats.
• Conducts security assessments and other information security routines consistently. Investigates and recommends corrective actions for data security related to established guidelines.
• Develops policies and procedures to standardize security functions and eliminate potential vulnerabilities and threats. Oversees that business needs are being met during…