Senior AppSec Engineer - Remote, 1x/wk Office

Cybersecurity Jobs; Omaha (NE); Remote; USD 140,000 - 180,000; Full time

Job summary

Blue Cross and Blue Shield of Nebraska (BCBSNE) is seeking a Senior Application Security Engineer to lead enterprise-wide security capabilities and champion secure software development practices. The role emphasizes static/dynamic analysis, DevSecOps integration, AI-related code risk, and risk-based vulnerability management.

You will partner with engineering, architecture, and risk teams to deliver practical, scalable security solutions while mentoring others and supporting audit readiness and

Qualifications

• Bachelor’s degree in Computer Science, Information Security, or related field (or equivalent experience).
• 6 years of experience in application security, secure software development, or DevSecOps.
• Hands-on experience with SAST, DAST, and dependency scanning tools, including tuning and operational ownership.
• Strong understanding of OWASP Top 10, APIs, authentication, and authorization.
• Experience integrating security into CI/CD pipelines and development workflows.

Responsibilities

• Own and operate application security tooling (SAST, DAST, software composition analysis).
• Embed application security into CI/CD pipelines and development workflows to enable shift-left security.
• Conduct secure code reviews and validate vulnerabilities for exploitability, impact, and remediation feasibility.
• Define and maintain secure coding standards, guidance, and reusable security patterns.
• Establish guardrails and review AI-assisted or AI-generated code to reduce risk.
• Triage findings with development teams to reduce false positives and drive remediation.
• Apply risk-based decision making aligned to risk appetite and compliance (NIST, HIPAA, SOC 2).
• Support application threat modeling and identify architectural security gaps.
• Collaborate with cloud, platform, and identity teams to secure application integration.
• Contribute to audit readiness and regulatory support for application security controls.
• Document processes, mentor others, and improve program resiliency.

Skills

SAST/DAST tooling

CI/CD integration

Vulnerability risk assessment

Communication with stakeholders

Independent ownership

AI risk awareness

Experience in App Security (6+ yrs)

Education

Bachelor’s degree in Computer Science, Information Security, or related field

CSSLP / GWAPT / CISSP (preferred)

Job description

Blue Cross and Blue Shield of Nebraska (BCBSNE) is seeking a Senior Application Security Engineer to lead enterprise-wide security capabilities and champion secure software development practices. The role emphasizes static/dynamic analysis, DevSecOps integration, AI-related code risk, and risk-based vulnerability management.

You will partner with engineering, architecture, and risk teams to deliver practical, scalable security solutions while mentoring others and supporting audit readiness and