Senior AppSec Engineer: Lead Secure SDLC & Code Review

Nelnet, Inc.

Lincoln, Northern (NE, KY)

Hybrid

USD 135,000 - 150,000

Full time

14 days+

Get more replies from employers

Send a job-specific resume in minutes.

Benefits offered by this job

Medical & dental

401K

Tuition reimbursement

Job summary

Nelnet, Inc. is seeking a Senior Application Security Engineer in Lincoln, NE to lead hands-on testing, secure code reviews, and secure SDLC enablement across applications. You will partner with engineering, cloud, and product teams to reduce security risks from design to production.

The role emphasizes manual testing expertise, threat modeling, and AI-assisted tooling, with a hybrid work option. 5-7+ years of experience and a Bachelor’s degree are required; advanced security training is

Qualifications

5-7+ years of hands-on application security or secure software engineering experience.

Responsibilities

Lead manual source code review with focus on business logic, access-control, authentication, authorization, and data-protection risks.
Perform and guide application security testing using SAST, DAST, SCA, container scanning, secrets detection, and web/API testing.
Expand Security Champions program through enablement and coaching.
Develop and improve automated source code review processes and CI/CD security checks to scale coverage.
Partner with engineering, cloud, and product teams to embed secure SDLC practices.
Create clear vulnerability reports with risk, business impact, urgency, and remediation steps.
Evaluate and apply AI-assisted tooling to accelerate code review, testing, triage, reporting, and secure workflows.
Advise teams on threat modeling for web, API, mobile, cloud, and AI-enabled designs.