Назад
Company hidden
3 дня назад

Sr. Application Security Testing Engineer (Cybersecurity)

164 612 - 201 193$
Формат работы
onsite
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Sr. Application Security Testing Engineer (Cybersecurity): Performing and improving application security testing across 3M’s application ecosystem with an accent on SAST, DAST, SCA, threat modeling, and secure design reviews. Focus on validating vulnerabilities, driving remediation with developers, integrating security tooling into CI/CD pipelines, and strengthening enterprise application security capabilities.

Location: Austin, Texas, United States; onsite role. Relocation assistance is available. Must be legally authorized to work in the United States without employment visa sponsorship.

Expected compensation: $164,612–$201,193, including base pay and variable incentive pay if eligible.

Company

hirify.global is a global corporation developing products and technologies across multiple industries and operating with teams and locations worldwide.

What you will do

  • Execute application security testing using SAST, DAST, SCA, and manual validation.
  • Conduct threat modeling and secure design reviews for new and existing applications.
  • Validate findings, summarize risks, and work with developers to drive effective remediation.
  • Integrate security tooling into CI/CD pipelines using platforms such as GitHub and Azure DevOps.
  • Partner with application, development, platform, cloud, engineering, and security teams to embed secure coding practices.
  • Contribute to application security standards, playbooks, audits, penetration-testing coordination, compliance evidence, and secure-development training.

Requirements

  • Bachelor’s degree in Cybersecurity, Computer Science, or a technology field, completed and verified before starting.
  • At least three years of experience in application security or secure software development in a private, public, government, or military environment.
  • Hands-on application security testing and validation experience.
  • Knowledge of the OWASP Top 10, secure coding patterns, and threat modeling.
  • Experience with modern development stacks and CI/CD pipelines.
  • Strong analytical, communication, and documentation skills.
  • Ability to collaborate across application, development, engineering, and security teams.

Nice to have

  • Experience with common SAST and DAST tools and source-code analysis for identifying and assessing application security vulnerabilities.
  • GWAPT, OSCP, or CSSLP certification.

Culture & Benefits

  • Full-time employee position with medical, dental, vision, health savings, flexible spending, disability, life insurance, paid absence, and retirement benefits.
  • Opportunity to collaborate with colleagues across global locations, technologies, and products.
  • Employees are expected to follow corporate policies, procedures, security standards, and environmental health and safety requirements.
  • US-based full-time employees must sign an employee agreement covering confidential information, trade secrets, conflicts of interest, and invention assignment; additional restrictions may apply to Job Grade 7 or equivalent and above.

Hiring process

  • Provide education and work history either by uploading a resume or entering the information directly into the application fields; applications may not be considered without it.
  • Confirm acceptance of the applicable terms of use and privacy policy before submitting the application.

Будьте осторожны

Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →