ci cdsastdastazure devopsowaspscathreat modelingapplication security
Вакансия из Hirify Global, списка международных tech-компаний Для мэтча и отклика нужен Plus
Пожаловаться
Зарплата и рынок
развернуть
$165к-201к/год
$170к$200кмедиана$230к
По похожим ролям (49) ~ $200к/год
На СНГ рынке: $4к/мес ($3.7к - $4.3к)
86
Хорошая вакансия
развернуть
Чётко очерченная роль в безопасности приложений в крупной международной компании: есть практическое тестирование и работа с командами разработки. Обязательный офис и отсутствие визового спонсорства сужают круг подходящих вариантов.
Только офис
Без визовой поддержки
Современные практики AppSec
Понятные задачи
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
Sr. Application Security Testing Engineer (Cybersecurity): Performing and improving application security testing across 3M’s application ecosystem with an accent on SAST, DAST, SCA, threat modeling, and secure design reviews. Focus on validating vulnerabilities, driving remediation with developers, integrating security tooling into CI/CD pipelines, and strengthening enterprise application security capabilities.
Location: Austin, Texas, United States; onsite role. Relocation assistance is available. Must be legally authorized to work in the United States without employment visa sponsorship.
Expected compensation: $164,612–$201,193, including base pay and variable incentive pay if eligible.
Company
hirify.global is a global corporation developing products and technologies across multiple industries and operating with teams and locations worldwide.
What you will do
Execute application security testing using SAST, DAST, SCA, and manual validation.
Conduct threat modeling and secure design reviews for new and existing applications.
Validate findings, summarize risks, and work with developers to drive effective remediation.
Integrate security tooling into CI/CD pipelines using platforms such as GitHub and Azure DevOps.
Partner with application, development, platform, cloud, engineering, and security teams to embed secure coding practices.
Contribute to application security standards, playbooks, audits, penetration-testing coordination, compliance evidence, and secure-development training.
Requirements
Bachelor’s degree in Cybersecurity, Computer Science, or a technology field, completed and verified before starting.
At least three years of experience in application security or secure software development in a private, public, government, or military environment.
Hands-on application security testing and validation experience.
Knowledge of the OWASP Top 10, secure coding patterns, and threat modeling.
Experience with modern development stacks and CI/CD pipelines.
Strong analytical, communication, and documentation skills.
Ability to collaborate across application, development, engineering, and security teams.
Nice to have
Experience with common SAST and DAST tools and source-code analysis for identifying and assessing application security vulnerabilities.
GWAPT, OSCP, or CSSLP certification.
Culture & Benefits
Full-time employee position with medical, dental, vision, health savings, flexible spending, disability, life insurance, paid absence, and retirement benefits.
Opportunity to collaborate with colleagues across global locations, technologies, and products.
Employees are expected to follow corporate policies, procedures, security standards, and environmental health and safety requirements.
US-based full-time employees must sign an employee agreement covering confidential information, trade secrets, conflicts of interest, and invention assignment; additional restrictions may apply to Job Grade 7 or equivalent and above.
Hiring process
Provide education and work history either by uploading a resume or entering the information directly into the application fields; applications may not be considered without it.
Confirm acceptance of the applicable terms of use and privacy policy before submitting the application.
Будьте осторожны
Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →