PNC Security Testing Specialist - Penetration Tester 

United States, Ohio 

881407838

**PNC will not provide sponsorship for employment visas or participate in STEM OPT for this position**Description:
A Security Testing Specialist (Penetration Tester) demonstrates general knowledge of concepts such as OWASP Top 10, vulnerability scanning, and penetration testing methodologies.
• Conducts and assists with automated and manual security testing of applications, infrastructure, and public cloud platforms to identify and validate vulnerabilities.
• Retests previously discovered vulnerabilities to confirm successful remediation.
• Develops and maintains documentation such as procedures, assets, communication, etc.
• Performs quality assurance of penetration testing and vulnerability scan artifacts.
• Contribute to the enhancement of the penetration testing program.- Experience conducting technical debriefs of security vulnerabilities to both technical and non-technical audiences
- Ability to review application scanning tool results and quickly identify false positives*The Most Qualified of Candidates will have one or more of the following:
Mobile testing experience
Mainframe testing experience
Threat Modelling experience
Mobile development experience
Web Application Development experience
Penetration Testing as a Security Consultant (1yr+)Qualified Certifications (Not required):
Offensive Security Certified Expert (OSCE)
Offensive Security Certified Professional (OSCP)
Offensive Security Wireless Professional (OSWP)
Certified Information Systems Security Professional (CISSP)Familiarity with, at least one of these tools, is required:
Burp Proxy/Man-in-the-Middle (MiTM) Proxy/ZAP proxy/Charles proxy; AppScan; NessusJob Description

• Carries out security testing of applications, infrastructure, and/or platforms to discover security vulnerabilities.
• Performs manual & automated security testing.
• Performs manual testing to validate vulnerabilities.
• Reviews the testing results with stakeholders and creates a report to review results with stakeholders.
• Assists in the design and implementation of security solutions and continuously enhances information security approaches and methodologies at manager discretion.

PNC Employees take pride in our reputation and to continue building upon that we expect our employees to be:

• Customer Focused - Knowledgeable of the values and practices that align customer needs and satisfaction as primary considerations in all business decisions and able to leverage that information in creating customized customer solutions.
• Managing Risk - Assessing and effectively managing all of the risks associated with their business objectives and activities to ensure they adhere to and support PNC's Enterprise Risk Management Framework.

Qualifications

Successful candidates must demonstrate appropriate knowledge, skills, and abilities for a role. Listed below are skills, competencies, work experience, education, and requiredneeded to be successful in this position.

Analytical Thinking, Effective Communications, Information Assurance, Information Security Management, Information Security Technologies, IT Environment, IT Standards, Procedures & Policies, IT Systems Management, Problem Solving, Software Security AssuranceRoles at this level typically require a university / college degree, with 5+ years of industry-relevant experience. Specific certifications are often required. In lieu of a degree, a comparable combination of education, job specific certification(s), and experience (including military service) may be considered.No Required Certification(s)No Required License(s)

This position is subject to the requirements of Section 19 of the Federal Deposit Insurance Act (FDIA) and, for any registered role, the Secure and Fair Enforcement for Mortgage Licensing Act of 2008 (SAFE Act) and/or the Financial Industry Regulatory Authority (FINRA), which prohibit the hiring of individuals with certain criminal history.

California Residents

Refer to the