Sr Application Security Engineer

Nelnet is seeking a Senior Application Security Engineer to lead application security testing, secure code review, and SDLC enablement. This role involves partnering with engineering, cloud, and product teams to identify and reduce security risks from design to production, utilizing manual testing, automation, threat modeling, and AI tools.

• Lead manual source code review for business logic, access-control, and data-protection risks
• Perform application security testing using SAST, DAST, SCA, and API methodologies
• Expand and support the Security Champions program
• Develop and improve automated source code review and CI/CD security checks
• Embed secure SDLC practices into design, development, and release activities
• Evaluate and apply AI-assisted tooling for security workflows

• No visa sponsorship is available.

• Must be authorized to work without sponsorship.