Senior Application Security Engineer - Remote DevSecOps

Blue Cross Blue Shield of Nebraska; Omaha (NE); Hybrid; USD 120,000 - 160,000; Full time

Job summary

Blue Cross and Blue Shield of Nebraska is seeking a Senior Application Security Engineer to lead and own enterprise application security. You will implement secure software development practices with focus on SAST, DAST, software composition analysis, and CI/CD integration.

You'll collaborate with engineering, architecture, risk, and cloud teams to embed security into workflows, perform secure reviews, and drive risk-based remediation while adhering to standards like NIST and HIPAA.

Qualifications

• Bachelor's degree in Computer Science, Information Security, or a related field (or equivalent experience).
• 6 years of experience in application security, secure software development, or DevSecOps.
• Hands-on experience with SAST, DAST, and dependency scanning tools, including tuning and operational ownership.
• Strong understanding of application vulnerability classes (OWASP Top 10, APIs, authentication, authorization).
• Experience integrating security into CI/CD pipelines and development workflows.
• Proven ability to assess risk, prioritize remediation, and clearly communicate decisions.
• Comfort working independently, taking ownership, and driving outcomes with minimal oversight.
• Strong communication skills with the ability to work effectively with developers, architects, and leadership.

Responsibilities

• Own and operate application security tooling incl. SAST/DAST and software composition analysis.
• Embed security into CI/CD pipelines and dev workflows (shift-left).
• Perform secure code reviews and validate vulnerabilities for exploitability.
• Define and maintain secure coding standards and reusable security patterns.
• Collaborate with teams to triage findings and drive remediation.
• Support risk-based decisions aligned to NIST/HIPAA/SOC 2.
• Contribute to audit readiness and regulatory support.
• Mentor others and document processes to reduce single points of failure.

Skills

SAST

DAST

Dependency scanning

CI/CD security integration

Threat modeling

Risk assessment

Communication with stakeholders

Education

Bachelor's degree in Computer Science, Information Security, or related field

Tools

SAST tooling

DAST tooling

Dependency scanning tools

Job description

Blue Cross and Blue Shield of Nebraska is seeking a Senior Application Security Engineer to lead and own enterprise application security. You will implement secure software development practices with focus on SAST, DAST, software composition analysis, and CI/CD integration.

You'll collaborate with engineering, architecture, risk, and cloud teams to embed security into workflows, perform secure reviews, and drive risk-based remediation while adhering to standards like NIST and HIPAA.