Sr Application Security Engineer

nelnet; Lincoln (NE); On-site; USD 135,000 - 150,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

HSA/FSA

401K

Stock purchase program

Tuition reimbursement

Wellness program

Incentive pay

Job summary

Nelnet is seeking a Senior Application Security Engineer to lead hands-on testing, secure code reviews, and secure SDLC enablement across modern environments. You will partner with engineering, cloud, and product teams to reduce security risks from design through production.

Annual compensation ranges from $135,000 to $150,000, with a hybrid work option and visa sponsorship not offered. Candidates must be authorized to work in the United States.

Qualifications

• 5-7+ years of hands-on application security, software security, or secure software engineering experience.
• Experience integrating security tooling and automated checks into CI/CD pipelines.
• Familiarity with secure code review and testing of web/API apps using OWASP Top 10.
• Experience communicating vulnerabilities and risk-based remediation to management and engineering.
• Experience with technical report writing and communication.

Responsibilities

• Lead manual source code review across priority applications, focusing on business logic, access-control, authentication, authorization, and data-protection risks.
• Perform and guide application security testing using SAST, DAST, SCA, container scanning, secrets detection, and web/API testing.
• Expand and support Security Champions program through enablement, coaching, and secure coding resources.
• Develop and improve automated source code review processes and CI/CD security checks.
• Embed secure SDLC practices into design, development, testing, release, and production support activities.
• Create clear vulnerability reports with risk, business impact, urgency, and remediation steps.
• Evaluate and apply AI-assisted tooling to accelerate code review, testing, triage, reporting, and secure workflows.
• Advise teams on threat modeling for web, API, mobile, cloud, and AI-enabled designs.

Skills

Cybersecurity

Coding

Automation

Testing QA

Stakeholder Mgmt

Education

Bachelor's degree

Tools

OWASP Top 10

CI/CD security tooling

SAST

DAST

SCA

Job description

Nelnet Business Services (NBS), a division of Nelnet, Inc., provides payment technology and education services to more than 1,200 higher education institutions, nearly 12,000 K-12 schools, and millions of individual students, families, and supporters across the globe. Our culture of service enables us to form long-lasting and trusted partnerships, while our focus on creativity and innovative solutions empowers our customer communities to thrive.

We are seeking a Senior Application Security Engineer to lead hands-on application security testing, secure code review, and secure SDLC enablement across moder application environments. This role partners closely with engineering, cloud, and product teams to identify, communicate, and reduce application and services security risks from design through production. The engineer will combine manual testing expertise, automation, threat modeling, and AI assisted tooling to scale the AppSec program, improve developer security practices, and support secure, resilient applications.

JOB RESPONSIBILITIES:

• Lead manual source code review across priority applications, with emphasis on business logic, access-control, authentication, authorization, and data-protection risks.
• Perform and guide application security testing using SAST, DAST, SCA, container scanning, secrets detection, and web/API testing methodologies.
• Expand and support the Security Champions program through enablement, coaching, secure coding guidance, and practical developer resources.
• Develop and improve automated source code review processes and CI/CD security checks to help scale consistent application security coverage.
• Partner with engineering, cloud, and product teams to embed secure SDLC practices into design, development, testing, release, and production support activities.
• Create clear vulnerability reports that explain risk, business impact, urgency, and recommended remediation steps for technical and non-technical audiences.
• Evaluate and apply AI-assisted tooling to accelerate code review, testing, triage, reporting, and secure development workflows
• Advise teams on threat modeling for web, API, mobile, cloud, and AI-enabled application designs.

Annual compensation range for this role is $135,000 - $150,000 depending on experience.

This position offers a hybrid work option. Nelnet values flexibility and understands the importance of work-life integration. Our hybrid work environment allows associates living within 30 miles of an office location to work remotely for part of the week, while also fostering collaboration and team connection through in-office presence three days per week.

Please note that we are unable to provide visa sponsorship for this position. To be considered, candidates must already be authorized to work in the United States without the need for current or future sponsorship.

EDUCATION:

Required:

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, Software Engineering, or a related field; or equivalent combination of education and relevant experience.

Preferred:

• Advanced degree or specialized training in application security, cybersecurity, software engineering, cloud security, or related technical discipline.

EXPERIENCE:

Required:

• 5-7+ years of hands-on application security, software security, or secure software engineering experience
• Experience integrating security tooling and automated checks into CI/CD pipelines
• Familiarity and experience conducting secure code review and testing web/API applications using OWASP Top 10 and web testing methodologies
• Experience effectively assessing, prioritizing, documenting, and communicating vulnerabilities and risk-based remediation guidance to management and engineering audiences
• Experience with technical report writing and communication

Preferred:

• Experience with AI/LLM-integrated applications, AI security tooling, mobile security, reverse engineering, or advanced application security certifications.

COMPETENCIES/SKILLS:

• Cybersecurity Proficiencies in required areas
• Coding/Programming Languages
• Automation & Scripting
• Testing & Quality Assurance
• Stakeholder Management & Communication

Our benefits package includes medical, dental, vision, HSA and FSA, generous earned time off, 401K/student loan repayment, life insurance & AD&D insurance, employee assistance program, employee stock purchase program, tuition reimbursement, performance-based incentive pay, short- and long-term disability, and a robust wellness program. Click here to learn more about our benefits: Benefits & Perks - Nelnet Inc

Nelnet is committed to providing a welcoming and respectful workplace where all associates have the opportunity to succeed. As an Equal Opportunity Employer, we ensure that all qualified applicants are considered for employment. Employment decisions are made without regard to race, color, religion/creed, national origin, gender, sex, marital status, age, disability, use of a guide dog or service animal, sexual orientation, military/veteran status, or any other status protected by federal, state, or local law. We value the unique contributions of every team member and believe that a positive work environment benefits everyone.

Qualified individuals with disabilities who require reasonable accommodations in order to apply or compete for positions at Nelnet may request such accommodations by contacting Corporate Recruiting at 402-486-5725 or [e-mail] .

Nelnet is a Drug Free and Tobacco Free Workplace.

Use of Artificial Intelligence in Hiring

We may use automated or artificial intelligence enabled tools to assist with the initial review of applications, such as identifying relevant skills or experience. These tools are used to support human review and do not make hiring decisions. A recruiter reviews applications and determines which candidates move forward in the hiring process. For more information, see our Privacy Policy and Pre-Use Notice: Automated Tools in Hiring

You may know Nelnet as the nation’s largest student loan servicer – but we do more than that. A lot more. We’re also a professional services company, consumer loan originator and servicer, payment processor, renewable energy innovator, and K-12 and higher education expert (and that’s just a shortlist). For over 40 years, we’ve been serving our customers, associates, and communities to make dreams possible.

EEO Info (https://nelnetinc.com/wp-content/uploads/EEO-poster.pdf) | EEO Letter (https://nelnet.com/wp-content/uploads/EEO-Jeffs-Letter.pdf) | EPPA Info (https://nelnetinc.com/wp-content/uploads/Employee-Polygraph-Protection-Act-Poster.pdf) | FMLA Info (https://nelnetinc.com/wp-content/uploads/FMLA-Leave.pdf)