Security Engineer – Cloud Security Controls

PNC

. Build and test security controls for Azure resources and AWS services .

Posted 10/14/2026full-timeUnited StatesMid-LevelSenior💰 $91,000 - $202,800 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in implementing and automating security controls for Azure and AWS cloud environments, ensuring compliance and security posture for production workloads. Proficient in scripting and collaboration with cross-functional teams to enhance cloud security practices.

Highest-signal resume keywords

AWS Cloud ServicesAzure Cloud ServicesSecurity Control ImplementationScripting Languages (Python, PowerShell, Bash)Cloud Security Best Practices

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security Gap AnalysisSecurity Control TestingCloud Workload ComplianceCI/CD AutomationInfrastructure as CodeSQL or SQL-Type Query LanguagesCSPM Tools ConfigurationChange Control ProcessesDocumentation of Security SolutionsProject Leadership

Soft Skills

Strong Written CommunicationStrong Verbal CommunicationProcess OrientedDetail OrientedMentoring

Tools & Technologies

GitCSPM ToolsCloud Security StandardsAgile MethodologiesDevOps Practices

Certifications & Qualifications

Azure Fundamentals (AZ-900)Azure Security Engineer Associate (AZ-500)AWS Cloud Security Engineer

Industry Keywords

Cloud SecurityEnterprise EnvironmentOperational Security RequirementsSecurity PostureGovernance Processes

Tech Stack

Tools & technologies

AWSAzureCloudPythonSQL

About the role

Key responsibilities & impact

Build and test security controls for Azure resources and AWS services
Validate security control effectiveness and promote controls to production workloads
Participate proactively in agile team planning sessions
Configure and engineer CSPM tools to analyze and assess cloud workloads for compliance in CI/CD environments
Assess, implement, automate, and document security solutions and processes for Microsoft Azure and AWS
Analyze workloads for alignment with operational security requirements before production
Work with the Cloud Security Product Owner to refine backlog tickets and define priority and sizing
Own RCSA Control TEC072 for Cloud Security
Automate and orchestrate cloud software deployment through CI/CD
Integrate enterprise security standards, policies, configurations, and architectures into applications, platforms, and infrastructure
Assist DevOps team members with security development and operationalization
Ensure applications seeking production deployment have an appropriate security posture
Collaborate with Cloud Architects, SOC, Cloud Product, Infrastructure as Code, and operational teams
Mentor junior team members and participate in roadmap planning
Provide subject matter expertise, implementation details, engineering support, documentation, and production support
Evaluate patches, updates, maintenance, and impacts of new standards
Use change control and governance processes to align solutions
Enable transition and day-to-day supportability with operational partners

Requirements

What you’ll need

University/college degree, typically a bachelor's degree
5+ years of industry-relevant experience
Comparable combination of education, job-specific certifications, and experience may be considered in lieu of a degree
Deep experience with AWS and/or Azure cloud services in an enterprise environment
Thorough understanding of cloud security best practices
Experience performing security gap analysis on cloud services or infrastructure
Experience implementing security controls for public cloud workloads in Azure and AWS
Experience creating security solutions balancing security with corporate priorities
Proficiency in one or more scripting languages such as Python, PowerShell, or Bash
Expertise with Git, including branching workflows
Experience testing security controls for effectiveness
Strong written and verbal communication skills
Process and detail oriented
Demonstrated project leadership
Ability to address security controls at scale across multiple cloud service providers
Expertise in SQL or SQL-type query languages
Preferred certifications: Azure Fundamentals (AZ-900), Azure Security Engineer Associate (AZ-500), AWS Cloud Security Engineer
No required certifications
No required licenses
No required or preferred language assessments
Must not require employment visa sponsorship; PNC will not participate in STEM OPT

Benefits

Comp & perks

Medical/prescription drug coverage with a Health Savings Account feature
Dental and vision options
Employee and spouse/child life insurance
Short- and long-term disability protection
401(k) with PNC match
Pension plan
Stock purchase plan
Dependent care reimbursement account
Back-up child/elder care
Adoption, surrogacy, and doula reimbursement
Educational assistance, including select programs fully paid
Wellness program with financial incentives
Maternity and/or parental leave
Up to 11 paid holidays each year
9 occasional absence days each year
15 to 25 vacation days each year, depending on career level
Remote work may be available in select geographic locations, subject to approval
Quiet, secure, and confidential home-based workspace for approved remote work