Application Security Engineer: Hybrid SDLC & AI/LLM

Nelnet, Inc.; Centennial (CO); Hybrid; USD 90,000 - 125,000; Full time

Benefits offered by this job

Medical

Job summary

Nelnet is seeking an Application Security Engineer to safeguard applications, services, and AI-driven components from design through production. You will pair hands-on testing with scalable automation, maturing our AppSec program while enabling developers to ship securely and rapidly.

The role emphasizes secure SDLC, SAST/DAST, and collaboration with engineering, cloud, and product teams, with a hybrid work arrangement and US citizenship requirement for government-related work.

Qualifications

• Experience in manual code review across major languages (Java, JavaScript/TypeScript, C#, PHP).
• Strong threat modeling and secure design for traditional and AI/LLM features.
• Proficient with SAST/DAST tooling and CI/CD integration.

Responsibilities

• Manual Source Code Review.
• SAST/DAST scanning.
• Expand the Security Champions program.
• Develop automated source code review processes.
• Work with product teams to ensure secure SDLC processes.
• Provide detailed vulnerability reports to the business.

Skills

Manual code review

Threat modeling

AI/LLM security

SAST/DAST

CI/CD integration

Python scripting

Communication

Web/API security

Tools

Container scanners

SCA

Secrets-detection tools

Job description

Nelnet is seeking an Application Security Engineer to safeguard applications, services, and AI-driven components from design through production. You will pair hands-on testing with scalable automation, maturing our AppSec program while enabling developers to ship securely and rapidly.

The role emphasizes secure SDLC, SAST/DAST, and collaboration with engineering, cloud, and product teams, with a hybrid work arrangement and US citizenship requirement for government-related work.