Senior API Product – Software Security Specialist

PNC

. Own and advance the enterprise API Security Program, including governance, strategy, risk management, and stakeholder coordination .

Posted 11/10/2026full-timeUnited StatesSenior💰 $112,000 - $228,800 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in API Security, including risk management, governance, and operationalization of security programs. Proficient in coaching developers on secure coding practices and managing API security processes and standards.

Highest-signal resume keywords

API Security FundamentalsOWASP API Security Top 10REST and SOAPAkamai API SecurityRisk Management

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

API SecurityRisk ManagementSecure Coding StandardsAPI DiscoveryMetrics and ReportingScriptingAPI ArchitectureSecurity TestingApplication SecurityRisk Visibility

Soft Skills

CoachingMentoringStakeholder CoordinationProject Management

Tools & Technologies

PostmanOpenAPI

Industry Keywords

SDLCBOLAAuthenticationAuthorizationSession Management

Tech Stack

Tools & technologies

SDLCSOAP

About the role

Key responsibilities & impact

Own and advance the enterprise API Security Program, including governance, strategy, risk management, and stakeholder coordination
Drive API discovery, inventory, risk visibility, and remediation across the enterprise
Help teams identify and address API security risks throughout the SDLC
Lead operationalization and adoption of Akamai API Security, including passive findings, active testing, metrics, reporting, and integrations
Partner with Application Security, Security Operations, Data Protection, development teams, and other stakeholders
Establish API Security processes, standards, guidance, metrics, and reporting
Demonstrate measurable risk reduction and continued program maturity
Coach and mentor developers to create more secure software
Provide subject matter expertise to Application Security programs
Help developers create more secure code
Manage projects and developer-related tasks
Set secure coding standards and requirements with the team
Coach developers on language-specific coding techniques to avoid or remediate coding flaws
Assess and manage risks in alignment with PNC's Enterprise Risk Management Framework

Requirements

What you’ll need

Strong understanding of API security fundamentals and common API architectures
Knowledge of REST, SOAP, OpenAPI, Postman, and scripting
Strong understanding of OWASP API Security Top 10 risks, including BOLA, authentication, authorization, and session management
University / college degree typically required for roles at this level
8+ years of industry-relevant experience typically required
In lieu of a degree, a comparable combination of education, job-specific certification(s), and experience, including military service, may be considered
No required certifications
No required licenses
No required or preferred language assessments
Must not require employment visa sponsorship; PNC will not participate in STEM OPT

Benefits

Comp & perks

Medical/prescription drug coverage with a Health Savings Account feature
Dental and vision options
Employee and spouse/child life insurance
Short- and long-term disability protection
401(k) with PNC match
Pension plan
Stock purchase plan
Dependent care reimbursement account
Back-up child/elder care
Adoption, surrogacy, and doula reimbursement
Educational assistance, including select programs fully paid
Robust wellness program with financial incentives
Maternity and/or parental leave
Up to 11 paid holidays each year
9 occasional absence days each year, unless otherwise required by law
Between 15 to 25 vacation days each year, depending on career level
Additional paid time off based on years of service