Technology Engineer - JAVA​/.NET​/Security Code Review

Position Overview

At PNC, we are focused on delivering the best customer experience while fostering an inclusive workplace culture. As a Technology Engineer in PNC’s Technology organization, you will be based in one of the following locations:
Pittsburgh, PA;
Cleveland, OH;
Birmingham, AL;
Dallas, TX; or Lakewood, CO. You are expected to have strong verbal and written communication skills.

• Identify, evaluate, and mitigate application security risks throughout the entire software development lifecycle (SDLC).
• Leverage a background in software development, preferably in Java and/or .NET, to support secure coding initiatives.
• Demonstrate comprehensive knowledge of application security and maintain up‑to‑date expertise in the OWASP Top 10 web application risks, providing guidance on appropriate mitigation strategies.
• Triage and remediate web application security vulnerabilities with proficiency and speed.
• Apply familiarity with Interactive Application Security Testing (IAST) when available, though it is not mandatory.
• Assist in incident response related to application attacks, analyzing and validating software vulnerabilities to distinguish legitimate attacks from false positives.
• Manually validate compensating controls to ensure application teams effectively address identified vulnerabilities when direct remediation is not immediately possible.
• Collaborate closely with application and engineering teams to promote secure coding practices and enhance overall application security posture.
• Analyze, manually validate software vulnerabilities, distinguish legitimate application attacks from false positives, and work with application teams to remediate confirmed issues efficiently.
• Assist with selecting appropriate platforms, integrating and configuring solutions, and developing software components for new and emerging technology projects aligned with business strategies and objectives.
• Provide consultation on common issues and best practices for junior staff.
• Conduct systematic analysis of client requirements within the traceability framework and resolve functional problems encountered.
• Ensure quality of project deliverables while maintaining compliance with relevant standards and processes.

• University or college degree with 3+ years of relevant or direct industry experience, or an equivalent combination of education, relevant certifications, and experience (including military service).
• Strong application security knowledge with hands‑on experience in software development.
• Familiarity with web application vulnerability assessment and remediation techniques.
• Experience with OAuth, OpenID Connect, or other authentication frameworks is a plus.
• Excellent problem‑solving skills, strong analytical capabilities, and attention to detail.
• Effective communication skills, both verbal and written, and the ability to work collaboratively across multiple teams.
• Knowledge of risk assessment, enterprise architecture frameworks, and emerging technologies is preferred.
• Understanding of IT industry trends, standards, and best practices.
• No required certifications or licenses, but certifications such as CISSP, CISA, or equivalent are advantageous.

PNC provides equal employment opportunity to qualified persons regardless of race, color, sex, religion, national origin, age, sexual orientation, gender identity, disability, veteran status, or other categories protected by law. This position is subject to the requirements of Section
19 of the Federal Deposit Insurance Act (FDIA) and, when applicable, the Secure and Fair Enforcement for Mortgage Licensing Act of2008 (SAFE Act) and/or the Financial Industry Regulatory Authority (FINRA).