Senior AppSec Engineer: Lead Secure SDLC & AI Testing

Nelnet, Inc.; Nebraska; Hybrid; USD 135,000 - 150,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

HSAs and FSAs

401K

Student loan repayment

Life insurance

Disability insurance

Tuition reimbursement

Wellness program

Job summary

Nelnet, Inc. is seeking a Senior Application Security Engineer to lead hands-on testing, secure code review, and secure SDLC enablement across modern applications.

You will partner with engineering, cloud, and product teams to reduce security risks from design through production, using manual testing, automation, threat modeling, and AI-assisted tooling. The role emphasizes secure development practices, clear risk reporting, and collaboration across teams, with a hybrid work option in the US.

Qualifications

• Required: 5-7+ years hands-on application security or secure software engineering.
• Experience integrating security tooling into CI/CD pipelines.
• Experience with OWASP Top 10 and web/API security testing.
• Ability to document vulnerabilities and remediation guidance for technical and non-technical audiences.
• Experience writing technical reports and communicating risk to stakeholders.

Responsibilities

• Lead manual source code reviews focusing on business logic, access control, and data protection.
• Perform and guide SAST/DAST/SCA, container scanning, and secrets detection.
• Expand Security Champions program with coaching and developer resources.
• Develop automated source code review processes and CI/CD security checks.
• Create clear vulnerability reports with business impact and urgency.
• Advise on threat modeling for web, API, mobile, cloud, and AI-enabled apps.

Skills

CI/CD security tooling

Threat modeling

Security testing (SAST/DAST)

Automation & scripting

Communication & reporting

Education

Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, Software Engineering, or related field

Advanced degree or specialized training in application security, cloud security, or related discipline

Tools

SAST tooling

DAST tooling

SCA tooling

Container scanning

Job description

Nelnet, Inc. is seeking a Senior Application Security Engineer to lead hands-on testing, secure code review, and secure SDLC enablement across modern applications.

You will partner with engineering, cloud, and product teams to reduce security risks from design through production, using manual testing, automation, threat modeling, and AI-assisted tooling. The role emphasizes secure development practices, clear risk reporting, and collaboration across teams, with a hybrid work option in the US.