Senior Application Security Testing Engineer

About the role

3M is seeking a Senior Application Security Testing Engineer to lead the identification, validation, and mitigation of security risks across its application portfolio. You will work closely with development and platform teams to embed security throughout the software lifecycle.

Key responsibilities

• Act as a subject‑matter expert for the application security testing program.
• Develop and maintain security standards, playbooks, and testing plans.
• Perform SAST, DAST, SCA, and manual code reviews.
• Conduct threat modeling and secure design reviews for new and existing applications.
• Validate findings and collaborate with developers to remediate vulnerabilities.
• Integrate security tools into CI/CD pipelines using GitHub and Azure DevOps.
• Partner with application, development, platform, and cloud teams to promote secure coding practices.
• Produce technical documentation and risk summaries for stakeholders.
• Support audits, coordinate penetration testing, and gather compliance evidence.
• Help drive security awareness and secure‑development training initiatives.

Required profile

• Bachelor’s degree in Cybersecurity, Computer Science, or a related field (completed before start).
• At least three years of experience in application security or secure software development in private, public, government, or military environments.
• Experience with common SAST/DAST tools and source‑code analysis.
• Relevant certifications (e.g., GWAPT, OSCP, CSSLP) are a plus.

Required skills

• SAST, DAST, SCA
• Threat modeling and secure design reviews
• CI/CD pipeline integration (GitHub, Azure DevOps)
• OWASP Top 10 knowledge
• Secure coding patterns and source‑code analysis