Security Specialist - Forensics
for sections like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Only include sections that have real specific content. We must not repeat job title as heading. Remove boilerplate, navigation, legal, EEO, etc. Also remove application instructions, duplicated lines, cookie/navigation, etc. Keep substantive info.
We need to parse the posting.
Let's extract sections:
- Position Overview: description about PNC, role location, etc. Could be "About the role" or "Position Overview". We'll use About the role
with paragraph(s).
- Role Responsibilities: bullet list.
- Preferred Certifications: list.
- Job Description: more details about responsibilities, maybe combine with responsibilities? But we can have a separate section "Job Description" maybe but we need to avoid duplication. The instructions: Use headings for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). So we should map content to those headings. Likely we have:
About the role: overview paragraph.
Responsibilities: list of duties.
Qualifications: includes education, experience, etc.
Skills: list of preferred skills.
Certifications: maybe under Qualifications or separate? Could be under Qualifications as "Preferred Certifications". But we have a heading "Qualifications" and "Skills". We'll put certifications under Qualifications maybe as a sublist? But we need to follow instruction: Use - for any list of duties/requirements/benefits. So we can have lists under Qualifications (experience, education) and Skills (list). Certifications could be a list under Qualifications as well.
Benefits: we have benefits description.
Pay: we have base salary range.
Schedule: not mentioned; we should not include Schedule heading if no content.
Requirements: maybe we can combine qualifications and requirements. The posting includes "Qualifications" section with required skills, experience, education, certifications. We'll treat that as Qualifications.
We also have "Preferred Certifications" list.
We also have "Preferred Skills" list.
We also have "Competencies" list.
We could include Competencies under Skills or Qualifications. But we need to avoid thin sections. Maybe combine Skills and Competencies into one Skills section.
Let's extract details:
About the role / Position Overview:
"At PNC, our people are our greatest differentiator and competitive advantage in the markets we serve. We are all united in delivering the best experience for our customers. We work together each day to foster an inclusive workplace culture where all of our employees feel respected, valued and have an opportunity to contribute to the company’s success. As a Security Specialist within PNC's Technology organization, you will be based in Denver, CO; Pittsburgh, PA; Cleveland, OH; Phoenix, AZ; or Birmingham, AL."
That's the overview.
Responsibilities (Role Responsibilities):
- Develop, tune, and maintain security monitoring content, detections, and alerting within the Security Operations Center (SOC).
- Lead security improvement initiatives and projects that strengthen detection, response, and overall security capabilities.
- Create, maintain, and improve threat hunting procedures, playbooks, and operational documentation.
- Serve as a senior escalation point for SOC analysts to assist with rule creation opportunities and provide investigative guidance for existing detections.
- Ensure security operations and response activities align with regulatory, compliance, and governance requirements.
- Provide actionable guidance to address deficiencies.
- Mentor junior team members and lead learning sessions to enhance organizational knowledge.
Also from Job Description: many responsibilities but overlapping. We should preserve all substantive info, not invent or summarize away detail. So we need to include all responsibilities from both sections, but avoid duplication. Let's list unique responsibilities from both.
From Job Description:
- Provides technical evaluation and analysis in a specific Security area.
- Supports activities, process, and tools needed to improve overall security posture of the organization.
- Primary responsibilities do not include Architect or Engineering responsibilities.
- Applies security concepts, reviews information, executes defined tasks, analyzes requirements, reviews logs, and creates documentation.
- Performs investigation and data loss prevention, data manipulation, and coordination of activities.
- Performs actions to address or mitigate risks and vulnerabilities.
- Reviews and defines controls.
- Advises on more complex security procedures and products for clients, security administrators and network operations.
- Participates in enforcement of control security risks and threats; potential of one more controls subject to manager discretion.
- Shares knowledge with staff.
- Conducts security assessments and other information security routines consistently.
- Investigates and recommends corrective actions for data security related to established guidelines.
- Develops policies and procedures to standardize security functions and eliminate potential vulnerabilities and threats.
- Oversees that business needs are being met during development.
We need to combine with Role Responsibilities list, ensuring no duplicates. Many are similar but we can keep both sets as separate bullet points; duplication is okay if not identical? The instruction: "Preserve ALL substantive information; do NOT invent or summarize away detail." It doesn't forbid duplication, but we should avoid duplicated lines. It says "Remove cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, and application instructions." So we should remove duplicated lines. So we need to deduplicate identical lines. Many lines are similar but not identical; we can keep both if they are not exact duplicates. However, to be safe, we can merge similar meaning but that would be summarizing. Better to keep both if they are not exact duplicates. Let's check for exact duplicates: None appear identical. So we can keep both sets.
But we need to ensure we don't include boilerplate like "Primary responsibilities do not include Architect or Engineering responsibilities." That's substantive.
Now Preferred Certifications list: CFCE, CHFI, CDFE, GCIH, GCFA, GCFE, GNFA, CEH, GCFR, GEIR, GCDA.
We also have "Certifications" under Qualifications: "No Required Certification(s)" but we should not include heading with filler. So we ignore that.
Qualifications section includes:
- Work Experience: Roles at this level typically require a university / college degree, with 5+ years of industry-relevant experience. Specific certifications are often required. In lieu of a degree, a comparable combination of education, job specific certification(s), and experience (including military service) may be considered.
- Education: Bachelors
- Certifications: No Required Certification(s) (skip)
- Licenses: No Required License(s) (skip)
- Language Assessments: No Required Or Preferred Language Assessments (skip)
- Preferred Skills list: Access Control (AC), Building Architecture, Customer Solutions, Disaster Recovery Planning, Forensic Investigations, Information Security, Network Security, Physical Security, Risk Assessments, Security Technologies
- Competencies list: Analytical Thinking, Effective Communications, Information Assurance, Information Security Management, Information Security Technologies, IT Environment, IT Standards, Procedures & Policies, IT Systems Management, Problem Solving, Software Security Assurance
We could combine Preferred Skills and Competencies into a Skills section. Or we could have separate Skills and Competencies sections but headings limited to given list; we can use Skills for both.
We'll create a Skills section with two lists: Preferred Skills and Competencies. Or we can just list all items under Skills.
Better to keep them separate as subheadings? Not allowed; only h3 headings. So we can put all under Skills heading, maybe separate paragraphs: "Preferred Skills:" then ul, "Competencies:" then ul.
Now Benefits: we have paragraph describing benefits.
Pay: we have base salary range and incentive eligible.
Schedule: not present, so omit.
Now we need to output HTML fragment only, no html/body tags, no markdown.
Let's construct:
About the role
At PNC, our people are our greatest differentiator and competitive advantage in the markets we serve. We are all united in delivering the best experience for our customers. We work together each day to foster an inclusive workplace culture where all of our employees feel respected, valued and have an opportunity to contribute to the company’s success. As a Security Specialist within PNC's Technology organization, you will be based in Denver, CO; Pittsburgh, PA; Cleveland, OH; Phoenix, AZ; or Birmingham, AL.
Responsibilities
- Develop, tune, and maintain security monitoring content, detections, and alerting within the Security Operations Center (SOC).
- Lead security improvement initiatives and projects that strengthen detection, response, and overall security capabilities.
- Create, maintain, and improve threat hunting procedures, playbooks, and operational documentation.
- Serve as a senior escalation point for SOC analysts to assist with rule creation opportunities and provide investigative guidance for existing detections.
- Ensure security operations and response activities align with regulatory, compliance, and governance requirements.
- Provide actionable guidance to address deficiencies.
- Mentor junior team members and lead learning sessions to enhance organizational knowledge.
- Provides technical evaluation and analysis in a specific Security area.
- Supports activities, process, and tools needed to improve overall security posture of the organization.
- Primary responsibilities do not include Architect or Engineering responsibilities.
- Applies security concepts, reviews information, executes defined tasks, analyzes requirements, reviews logs, and creates documentation.
- Performs investigation and data loss prevention, data manipulation, and coordination of activities.
- Performs actions to address or mitigate risks and vulnerabilities.
- Reviews and defines controls.
- Advises on more complex security procedures and products for clients, security administrators and network operations.
- Participates in enforcement of control security risks and threats; potential of one more controls subject to manager discretion.
- Shares knowledge with staff.
- Conducts security assessments and other information security routines consistently.
- Investigates and recommends corrective actions for data security related to established guidelines.
- Develops policies and procedures to standardize security functions and eliminate potential vulnerabilities and threats.
- Oversees that business needs are being met during development.
Qualifications
Roles at this level typically require a university / college degree, with 5+ years of industry-relevant experience. Specific certifications are often required. In lieu of a degree, a comparable combination of education, job specific certification(s), and experience (including military service) may be considered.
Education: Bachelors
Preferred Certifications:
- CFCE
- CHFI
- CDFE
- GCIH
- GCFA
- GCFE
- GNFA
- CEH
- GCFR
- GEIR
- GCDA
Skills
Preferred Skills:
- Access Control (AC)
- Building Architecture
- Customer Solutions
- Disaster Recovery Planning
- Forensic Investigations
- Information Security
- Network Security
- Physical Security
- Risk Assessments
- Security Technologies
Competencies:
- Analytical Thinking
- Effective Communications
- Information Assurance
- Information Security Management
- Information Security Technologies
- IT Environment
- IT Standards, Procedures & Policies
- IT Systems Management
- Problem Solving
- Software Security Assurance
Benefits
PNC offers a comprehensive range of benefits to help meet
About the role
At PNC, our people are our greatest differentiator and competitive advantage in the markets we serve. We are all united in delivering the best experience for our customers. We work together each day to foster an inclusive workplace culture where all of our employees feel respected, valued and have an opportunity to contribute to the company’s success. As a Security Specialist within PNC's Technology organization, you will be based in Denver, CO; Pittsburgh, PA; Cleveland, OH; Phoenix, AZ; or Birmingham, AL.
Responsibilities
- Develop, tune, and maintain security monitoring content, detections, and alerting within the Security Operations Center (SOC).
- Lead security improvement initiatives and projects that strengthen detection, response, and overall security capabilities.
- Create, maintain, and improve threat hunting procedures, playbooks, and operational documentation.
- Serve as a senior escalation point for SOC analysts to assist with rule creation opportunities and provide investigative guidance for existing detections.
- Ensure security operations and response activities align with regulatory, compliance, and governance requirements.
- Provide actionable guidance to address deficiencies.
- Mentor junior team members and lead learning sessions to enhance organizational knowledge.
- Provides technical evaluation and analysis in a specific Security area.
- Supports activities, process, and tools needed to improve overall security posture of the organization.
- Primary responsibilities do not include Architect or Engineering responsibilities.
- Applies security concepts, reviews information, executes defined tasks, analyzes requirements, reviews logs, and creates documentation.
- Performs investigation and data loss prevention, data manipulation, and coordination of activities.
- Performs actions to address or mitigate risks and vulnerabilities.
- Reviews and defines controls.
- Advises on more complex security procedures and products for clients, security administrators and network operations.
- Participates in enforcement of control security risks and threats; potential of one more controls subject to manager discretion.
- Shares knowledge with staff.
- Conducts security assessments and other information security routines consistently.
- Investigates and recommends corrective actions for data security related to established guidelines.
- Develops policies and procedures to standardize security functions and eliminate potential vulnerabilities and threats.
- Oversees that business needs are being met during development.
Qualifications
Roles at this level typically require a university / college degree, with 5+ years of industry-relevant experience. Specific certifications are often required. In lieu of a degree, a comparable combination of education, job specific certification(s), and experience (including military service) may be considered.
Education: Bachelors
Preferred Certifications:
- CFCE
- CHFI
- CDFE
- GCIH
- GCFA
- GCFE
- GNFA
- CEH
- GCFR
- GEIR
- GCDA
Skills
Preferred Skills:
- Access Control (AC)
- Building Architecture
- Customer Solutions
- Disaster Recovery Planning
- Forensic Investigations
- Information Security
- Network Security
- Physical Security
- Risk Assessments
- Security Technologies
Competencies:
- Analytical Thinking
- Effective Communications
- Information Assurance
- Information Security Management
- Information Security Technologies
- IT Environment
- IT Standards, Procedures & Policies
- IT Systems Management
- Problem Solving
- Software Security Assurance
Benefits
PNC offers a comprehensive range of benefits to help meet