> Markdown version of [/jobs/ext/2609344-sr-application-security-engineer](https://www.wearedevelopers.com/jobs/ext/2609344-sr-application-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Sr Application Security Engineer - **Company:** Nelnet - **Location:** Lincoln, NE, United States (Remote available) - **Experience:** Expert - **Salary:** $135,000.0 - $150,000.0 - **Contract:** Permanent contract - **Skills:** Application Programming Interfaces (APIs), Artificial Intelligence, Business Logic, User Authentication, Cloud Computing Security, Code Review, Cyber Security, Continuous Integration, Open Web Application Security, Reverse Engineering, Secure Coding, Mobile Security, Software Engineering, Systems Integration, Web Testing, Large Language Models, Software Security, Information Technology, Api Management, Static Application Security Testing, Programming Languages, Dynamic Application Security Testing - **Published:** August 9, 2026 - **Apply:** https://nelnet.wd1.myworkdayjobs.com/MyNelnet/job/Lincoln-NE/Sr-Application-Security-Engineer_R22967 ## About the Role Required: * Bachelor's degree in Computer Science, Cybersecurity, Information Technology, Software Engineering, or a related field; or equivalent combination of education and relevant experience. Preferred: * Advanced degree or specialized training in application security, cybersecurity, software engineering, cloud security, or related technical discipline. EXPERIENCE: Required: * 5-7+ years of hands-on application security, software security, or secure software engineering experience * Experience integrating security tooling and automated checks into CI/CD pipelines * Familiarity and experience conducting secure code review and testing web/API applications using OWASP Top 10 and web testing methodologies * Experience effectively assessing, prioritizing, documenting, and communicating vulnerabilities and risk-based remediation guidance to management and engineering audiences * Experience with technical report writing and communication Preferred: * Experience with AI/LLM-integrated applications, AI security tooling, mobile security, reverse engineering, or advanced application security certifications. COMPETENCIES/SKILLS: * Cybersecurity Proficiencies in required areas * Coding/Programming Languages * Automation & Scripting * Testing & Quality Assurance * Stakeholder Management & Communication ## Description We are seeking a Senior Application Security Engineer to lead hands-on application security testing, secure code review, and secure SDLC enablement across moder application environments. This role partners closely with engineering, cloud, and product teams to identify, communicate, and reduce application and services security risks from design through production. The engineer will combine manual testing expertise, automation, threat modeling, and AI assisted tooling to scale the AppSec program, improve developer security practices, and support secure, resilient applications., * Lead manual source code review across priority applications, with emphasis on business logic, access-control, authentication, authorization, and data-protection risks. * Perform and guide application security testing using SAST, DAST, SCA, container scanning, secrets detection, and web/API testing methodologies. * Expand and support the Security Champions program through enablement, coaching, secure coding guidance, and practical developer resources. * Develop and improve automated source code review processes and CI/CD security checks to help scale consistent application security coverage. * Partner with engineering, cloud, and product teams to embed secure SDLC practices into design, development, testing, release, and production support activities. * Create clear vulnerability reports that explain risk, business impact, urgency, and recommended remediation steps for technical and non-technical audiences. * Evaluate and apply AI-assisted tooling to accelerate code review, testing, triage, reporting, and secure development workflows * Advise teams on threat modeling for web, API, mobile, cloud, and AI-enabled application designs. ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Are Code Reviews Worth It? Insights from 16 Years of Review Data](https://www.wearedevelopers.com/videos/1135-are-code-reviews-worth-it-insights-from-16-years-of-review-data) - [Developer Time Is Valuable - Use the Right Tools - Kilian Valkhof](https://www.wearedevelopers.com/videos/1792-developer-time-is-valuable-use-the-right-tools-kilian-valkhof) - [How to Cause (or Prevent) a Massive Data Breach- Secure Coding and IDOR](https://www.wearedevelopers.com/videos/39-how-to-cause-or-prevent-a-massive-data-breach-secure-coding-and-idor) - [Can Machines Dream of Secure Code? Emerging AI Security Risks in LLM-driven Developer Tools](https://www.wearedevelopers.com/videos/1217-can-machines-dream-of-secure-code-emerging-ai-security-risks-in-llm-driven-developer-tools) - [Build a CI/CD pipeline to automate code reviews and ensure code quality](https://www.wearedevelopers.com/videos/349-build-a-ci-cd-pipeline-to-automate-code-reviews-and-ensure-code-quality) ## Related Articles - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market)