Technology Engineer - JAVA/.NET/Security Code Review
Core
Identify, evaluate, and mitigate application security risks throughout the software development lifecycle (SDLC) by triaging vulnerabilities and validating compensating controls.
Role type
Application Security Engineer (Java/.NET)
Builds
Secure software components and applications for PNC's technology organization
Domain
Banking / Application Security
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Java, .NET, OWASP Top 10, web application security vulnerability triage, manual validation of compensating controls, incident response, secure coding practices
Preferred skills
Interactive Application Security Testing (IAST), incident response experience
Technologies
Java, .NET
Responsibilities
Identify and mitigate application security risks throughout the SDLC; triage and remediate web application security vulnerabilities; manually validate software vulnerabilities and distinguish legitimate attacks from false positives; collaborate with engineering teams to promote secure coding practices; analyze and resolve functional problems within the traceability framework.
Seniority
Mid-level, hands-on IC