Sr Application Security Engineer
Nelnet, Inc.21 days ago
Remote, United StatesSenior
Base Salary
$135k - $150k/yr
Responsibilities
- Lead manual source code reviews focused on business logic, access control, authentication, authorization, and data protection.
- Perform and guide SAST, DAST, SCA, container scanning, secrets detection, and web/API security testing.
- Expand the Security Champions program through enablement, coaching, secure coding guidance, and developer resources.
- Develop automated source code review processes and CI/CD security checks.
- Partner with engineering, cloud, and product teams to embed secure SDLC practices from design through production support.
- Write vulnerability reports describing risk, business impact, urgency, and remediation guidance for technical and non-technical audiences.
- Evaluate AI-assisted tooling for code review, testing, triage, reporting, and secure development workflows.
- Advise on threat modeling for web, API, mobile, cloud, and AI-enabled application designs.
Requirements
- Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, Software Engineering, or a related field, or an equivalent combination of education and relevant experience.
- 5-7+ years of hands-on application security, software security, or secure software engineering experience.
- Experience integrating security tooling and automated checks into CI/CD pipelines.
- Experience conducting secure code review and testing web/API applications using OWASP Top 10 and web testing methodologies.
- Experience assessing, prioritizing, documenting, and communicating vulnerabilities and risk-based remediation guidance.
- Experience with technical report writing and communication.
- Preferred qualifications include an advanced degree or specialized training in application security, cybersecurity, software engineering, cloud security, or a related technical discipline.
- Preferred experience includes AI/LLM-integrated applications, AI security tooling, mobile security, reverse engineering, or advanced application security certifications.
Benefits
- Medical, dental, vision, HSA, and FSA benefits.
- Generous earned time off, 401K/student loan repayment, life insurance, AD&D insurance, employee assistance, employee stock purchase, tuition reimbursement, performance-based incentive pay, short- and long-term disability, and wellness programs.
- Hybrid work option for associates living within 30 miles of an office, with remote work part of the week and in-office presence three days per week.
Categories