Senior AppSec Engineer — Lead Security Testing & SDLC

Nelnet; United States; Hybrid; USD 135,000 - 150,000; Full time

Benefits offered by this job

Medical

Dental

Vision

HSA/FSA

401K / student loan repayment

Life insurance & AD&D

Employee assistance program

Employee stock purchase program

Tuition reimbursement

Disability insurance

Job summary

Nelnet is seeking a Senior Application Security Engineer to lead hands-on app security testing, secure code reviews, and secure SDLC enablement across applications. You will partner with engineering, cloud, and product teams to identify, communicate, and mitigate security risks through design to production.

The role requires 5–7+ years of hands-on security experience, familiarity with OWASP Top 10, and the ability to drive secure coding practices.

Qualifications

• Bachelor’s degree required; advanced degree preferred.
• 5–7+ years hands-on app security or secure software engineering experience.
• Experience with security tooling integrated into CI/CD pipelines.
• Secure code review and testing of web/API apps using OWASP Top 10.

Responsibilities

• Lead manual source code review focusing on business logic, access-control, authentication, and data protection risks.
• Perform and guide application security testing using SAST, DAST, SCA, container scanning, and secrets detection.
• Expand the Security Champions program through enablement and coaching of developers.
• Develop and improve automated source code review processes and CI/CD security checks.
• Embed secure SDLC practices into design, development, testing, release, and production support.

Skills

Cybersecurity Proficiencies

Coding/Programming Languages

Automation & Scripting

Testing & Quality Assurance

Stakeholder Management & Communication

Education

Bachelor’s degree in Computer Science, Cybersecurity, IT, Software Engineering, or related field

Advanced degree or specialized training in application security / cloud security

Tools

CI/CD tooling

OWASP Top 10 testing

AI security tooling

Job description

Nelnet is seeking a Senior Application Security Engineer to lead hands-on app security testing, secure code reviews, and secure SDLC enablement across applications. You will partner with engineering, cloud, and product teams to identify, communicate, and mitigate security risks through design to production.

The role requires 5–7+ years of hands-on security experience, familiarity with OWASP Top 10, and the ability to drive secure coding practices.