AppSec Engineer - Hybrid: Secure AI-Driven Apps

nelnet; Centennial (CO); Hybrid; USD 110,000 - 150,000; Full time

Benefits offered by this job

Hybrid work option

Job summary

Nelnet is seeking a highly skilled Application Security Engineer with hands-on experience in secure code review, SAST/DAST, automation, and modern SDLC practices—including AI/LLM security. You will partner with engineering, cloud, and product teams to safeguard applications from design through production in a hybrid work setting.

The role requires 2–4 years of app security experience, experience integrating security tooling into CI/CD, familiarity with OWASP Top 10, and strong communication

Qualifications

• 2–4 years of hands-on application security experience.
• Experience integrating security tooling into CI/CD pipelines.
• Familiarity with OWASP Top 10 and web testing methodologies.

Responsibilities

• Manual Source Code Review.
• SAST/DAST scanning.
• Expand the Security Champions program.
• Develop automated source code review processes.
• Work with product teams to ensure secure SDLC processes.
• Provide detail vulnerability reports to businesses.

Skills

Manual code review

Threat modeling

CI/CD integration

Python scripting

AI/LLM security

Web/API security

Communication skills

Security testing

Education

Bachelor's degree in CS or related field

Tools

SAST tools

DAST tools

CI/CD tooling

Job description

Nelnet is seeking a highly skilled Application Security Engineer with hands-on experience in secure code review, SAST/DAST, automation, and modern SDLC practices—including AI/LLM security. You will partner with engineering, cloud, and product teams to safeguard applications from design through production in a hybrid work setting.

The role requires 2–4 years of app security experience, experience integrating security tooling into CI/CD, familiarity with OWASP Top 10, and strong communication