Lead Application Security Engineer — Secure SDLC & AI Tooling

your Jared; Northern (KY); Hybrid; USD 135,000 - 150,000; Full time

Benefits offered by this job

Medical, dental, vision

401K

Tuition reimbursement

Wellness program

Job summary

Nelnet Business Services (NBS), a division of Nelnet, Inc., seeks a Senior Application Security Engineer to lead hands-on testing, secure code reviews, and secure SDLC enablement across modern app environments.

The role partners with engineering, cloud, and product teams to identify, communicate, and reduce application security risks from design through production. 5-7+ years of experience required.

Qualifications

• 5-7+ years hands-on application security, software security, or secure software engineering experience.
• Experience integrating security tooling and automated checks into CI/CD pipelines.
• Familiarity with secure code review and testing web/API apps using OWASP Top 10.
• Ability to communicate vulnerabilities and risk-based remediation guidance to technical and non-technical audiences.
• Experience with technical report writing and communication.

Responsibilities

• Lead manual source code review focusing on business logic, access control, authentication and data protection risks.
• Perform and guide application security testing using SAST, DAST, SCA, container scanning, secrets detection, and web/API testing methodologies.
• Expand the Security Champions program through enablement, coaching, and practical developer resources.
• Develop and improve automated source code review processes and CI/CD security checks.
• Partner with teams to embed secure SDLC practices from design to production support.
• Create clear vulnerability reports explaining risk, business impact, urgency, and remediation steps.
• Evaluate and apply AI-assisted tooling to accelerate code review and secure development workflows.
• Advise teams on threat modeling for web, API, mobile, cloud, and AI-enabled designs.

Skills

Cybersecurity Proficiencies in req.

Coding/Programming Languages

Automation & Scripting

Testing & QA

Stakeholder Management & Communication

Education

Bachelor's degree

Advanced degree / specialized training (preferred)

Job description

Nelnet Business Services (NBS), a division of Nelnet, Inc., seeks a Senior Application Security Engineer to lead hands-on testing, secure code reviews, and secure SDLC enablement across modern app environments.

The role partners with engineering, cloud, and product teams to identify, communicate, and reduce application security risks from design through production. 5-7+ years of experience required.