Security Specialist - Application Security
Core
Provides technical evaluation and analysis in application security, guiding development teams to remediate vulnerabilities, and implementing secure design and authentication solutions.
Role type
Senior IC application security specialist
Builds
Secure software and secure design patterns for PNC's technology organization
Domain
Financial services / Application Security
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
threat modeling, OWASP remediation, API security, secure design, authentication solutions, SDLC gap analysis, SAST/DAST/RASP, CI/CD pipeline security
Preferred skills
API security tools, BSIMM/SAMM frameworks, penetration testing, public cloud security (AWS/Azure/GCP), software development experience, SD Elements
Technologies
SAST, DAST, RASP, CI/CD pipelines, AWS, Azure, GCP, SD Elements
Responsibilities
Perform threat modeling and security assessments; guide development teams on vulnerability remediation; implement secure authentication and design solutions; analyze SDLC gaps and recommend controls; develop security policies and procedures; share security knowledge with staff.
Seniority
Senior, hands-on IC
