Sr. Application Security Testing Engineer

About the role

The Sr. Application Security Testing Engineer position at 3M provides an opportunity to transition from other private, public, government, or military experience to a 3M career. You will serve as a technical expert responsible for identifying, validating, and reducing application security risk across 3M's application ecosystem.

Responsibilities

• Manage application security testing program execution and contribute to application security standards and playbooks.
• Support planning and prioritization of application security testing activities.
• Perform application security testing including SAST, DAST, SCA, and manual validation.
• Conduct threat modeling and secure design reviews for new and existing applications.
• Validate findings and work with developers to drive effective remediation.
• Integrate security tooling into CI/CD pipelines using platforms such as GitHub and Azure DevOps.
• Partner with application, development, platform, and cloud teams to embed secure coding practices.
• Provide clear technical documentation and risk summaries for stakeholders.
• Support audits, penetration testing coordination, and compliance evidence collection.
• Contribute to security awareness and secure development training initiatives.

Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, or technology field (completed and verified prior to start).
• Three (3) years of experience in application security or secure software development in a private, public, government or military environment.

Skills and Expertise

• Experience using common SAST and DAST tools, as well as performing source code analysis to identify and assess application security vulnerabilities.
• Certifications such as GWAPT, OSCP, or CSSLP are a plus.
• Strong hands-on experience in application security testing and validation.
• Knowledge of OWASP Top 10, secure coding patterns, and threat modeling.
• Experience with modern development stacks and CI/CD pipelines.
• Strong analytical, communication, and documentation skills.
• Ability to collaborate effectively across application, development, engineering and security teams.

Benefits

The position offers competitive pay and benefits, including a range of options such as Medical, Dental & Vision, Health Savings Accounts, Health Care & Dependent Care Flexible Spending Accounts, Disability Benefits, Life Insurance, Voluntary Benefits, Paid Absences, and Retirement Benefits. Details are available at this link.

Pay & Benefits

The expected compensation range for this position is $164,612 - $201,193, which includes base pay plus variable incentive pay, if eligible. This range represents a good faith estimate for this position. The specific compensation offered to a candidate may vary based on factors including, but not limited to, the candidate’s relevant knowledge, training, skills, work location, and/or experience. For more details, please refer to this link.

Equal Opportunity Employer

3M is an equal opportunity employer and is committed to providing a workplace free from discrimination and harassment. We celebrate diversity and welcome applicants of all backgrounds.