> Markdown version of [/jobs/ext/2116831-sr-application-security-engineer](https://www.wearedevelopers.com/jobs/ext/2116831-sr-application-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Sr Application Security Engineer - **Company:** Nelnet - **Location:** Omaha, NE, United States (Remote available) - **Experience:** Expert - **Salary:** $135,000.0 - $150,000.0 - **Contract:** Permanent contract - **Skills:** Application Programming Interfaces (APIs), Artificial Intelligence, Business Logic, User Authentication, Cloud Computing Security, Cloud Engineering, Code Review, Cyber Security, Continuous Integration, Open Web Application Security, Reverse Engineering, Secure Coding, Mobile Security, Software Engineering, Web Testing, Large Language Models, Software Security, Information Technology, Api Management, Static Application Security Testing, Dynamic Application Security Testing - **Published:** August 19, 2026 - **Apply:** https://www.careerjet.com/job/us83a73bb65b6c481bdabeb1d9e0680619/eaa ## About the Role Bachelor's degree in Computer Science, Cybersecurity, Information Technology, Software Engineering, or a related field; or equivalent combination of education and relevant experience. Preferred: Advanced degree or specialized training in application security, cybersecurity, software engineering, cloud security, or related technical discipline. EXPERIENCE: Required: 5-7+ years of hands-on application security, software security, or secure software engineering experience Experience integrating security tooling and automated checks into CI/CD pipelines Familiarity and experience conducting secure code review and testing web/API applications using OWASP Top 10 and web testing methodologies Experience effectively assessing, prioritizing, documenting, and communicating vulnerabilities and risk-based remediation guidance to management and engineering audiences Experience with technical report writing and communication Preferred: * Experience with AI/LLM-integrated applications, AI security tooling, mobile security, reverse engineering, or advanced application security certifications. ## Description Lead manual source code review across priority applications, with emphasis on business logic, access-control, authentication, authorization, and data-protection risks. Perform and guide application security testing using SAST, DAST, SCA, container scanning, secrets detection, and web/API testing methodologies. Expand and support the Security Champions program through enablement, coaching, secure coding guidance, and practical developer resources. Develop and improve automated source code review processes and CI/CD security checks to help scale consistent application security coverage. Partner with engineering, cloud, and product teams to embed secure SDLC practices into design, development, testing, release, and production support activities. Create clear vulnerability reports that explain risk, business impact, urgency, and recommended remediation steps for technical and non-technical audiences. Evaluate and apply AI-assisted tooling to accelerate code review, testing, triage, reporting, and secure development workflows Advise teams on threat modeling for web, API, mobile, cloud, and AI-enabled application designs. Annual compensation range for this role is $135,000 - $150,000 depending on experience. This position offers a hybrid work option. Nelnet values flexibility and understands the importance of work-life integration. Our hybrid work environment allows associates living within 30 miles of an office location to work remotely for part of the week, while also fostering collaboration and team connection through in-office presence three days per week. Please note that we are unable to provide visa sponsorship for this position. To be considered, candidates must already be authorized to work in the United States without the need for current or future sponsorship., Description The Defense Sector at Leidos is looking for an experienced Senior Cloud Engineer to support a fast-paced program with the Air Force Life Cycle Management Center. We a… + 7 days ago, Description Your greatest work is ahead! Leidos is seeking a F5 Load Balance Network Engineer to support a large enterprise IT contract for the DOD. This role is responsible fo… + 17 days ago + ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Developer Time Is Valuable - Use the Right Tools - Kilian Valkhof](https://www.wearedevelopers.com/videos/1792-developer-time-is-valuable-use-the-right-tools-kilian-valkhof) - [Are Code Reviews Worth It? Insights from 16 Years of Review Data](https://www.wearedevelopers.com/videos/1135-are-code-reviews-worth-it-insights-from-16-years-of-review-data) - [How to Cause (or Prevent) a Massive Data Breach- Secure Coding and IDOR](https://www.wearedevelopers.com/videos/39-how-to-cause-or-prevent-a-massive-data-breach-secure-coding-and-idor) - [Software Security 101: Secure Coding Basics](https://www.wearedevelopers.com/videos/220-software-security-101-secure-coding-basics) - [Automated Security for the Entire SDLC](https://www.wearedevelopers.com/videos/100323-automated-security-for-the-entire-sdlc) ## Related Articles - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)