Application Security Engineer

Nelnet is a diversified and innovative company committed to enriching lives through the power of service as a student loan servicer professional services company consumer loan originator and servicer payments processor renewable energy solutions and K-12 and higher education expert. For over 40 years Nelnet has been serving its customers associates and communities.

The perks of working at Nelnet go beyond our benefits package. When you join the Nelnet team youre part of a community invested in the success of each individual. That support comes through in our work as we are united by our mission of creating opportunities for people where they live learn and work.

JOB RESPONSIBILITIES:

Develop and maintain applications to support our application security concepts

Develop security reference implementations

Integrate security into our build and deploy pipelines

Maintain security controls and measure implementation across technology Java Cloud etc

Enable controls to monitor our development supply chain ( party dependencies)

Remediate and facilitate the resolution of vulnerabilities

Participate and facilitate Risk Assessment and Threat Modeling

Serve as an auditing consulting and training resource to all Nelnet product teams
Perform appropriate vulnerability scanning static and dynamic analysis
Work with external entities that are performing vulnerability scans
Participate in tool and vendor selection process from a security perspective.
Create and update learning resources for application security
Develop and present on application security topics for a wide variety of audiences
Stay informed about application security best practices across Nelnet development platforms including web mobile and cloud

Nelnet believes in a hybrid work environment that accommodates both in-office and remote work. This model promotes a positive work-life balance and culture enabling in-person collaboration when possible while also providing benefits associated with remote work. The standard hybrid work schedule includes a 3/2 (in-office/work-from-home) split for associates that reside within 30 miles of an is subject to change based on manager discretion.

US Citizenship and the ability to obtain a 6C Federal security clearance are required for this role. Some travel may be required.

EDUCATION:
BS / MS in Computer Science Engineering related discipline or equivalent experience

EXPERIENCE:
Minimum 2 years of experience in web application software development.
Minimum 1 years of experience focused on Application Security.

COMPETENCIES SKILLS/KNOWLEDGE/ABILITIES:
Understanding of a variety of application development architectures platforms methodologies and supporting operating system
Experience identifying and protecting against web application and web-service security vulnerabilities including those found in the OWASP Top 10 and CWE Top 25
Knowledge of authentication and authorization cryptography and API security
Ability to identify triage manage and remediate security vulnerabilities
Experience with build processes and CI/CD
Knowledge of cloud technologies
Experience with web and API development technologies such Java NPM Angular React
Strong verbal and written communication skills
Strong consensus building multi-tasking interpersonal and analytical skills
Enjoys looking for and building efficiencies into the team takes ownership

Pay range for this position is $80000 -$110000 annually

Our benefits package includes medical dental vision HSA and FSA generous earned time off 401K/student loan repayment life insurance & AD&D insurance employee assistance program employee stock purchase program tuition reimbursement performance-based incentive pay short- and long-term disability and a robust wellness program. Click here to learn more about our benefits: LINK.

Nelnet is committed to providing a welcoming and respectful workplace where all associates have the opportunity to succeed. As an Equal Opportunity Employer we ensure that all qualified applicants are considered for employment. Employment decisions are made without regard to race color religion/creed national origin gender sex marital status age disability use of a guide dog or service animal sexual orientation military/veteran status or any other status protected by federal state or local law. We value the unique contributions of every team member and believe that a positive work environment benefits everyone.

Qualified individuals with disabilities who require reasonable accommodations in order to apply or compete for positions at Nelnet may request such accommodations by contacting Corporate Recruiting at or.

Nelnet is a Drug Free and Tobacco Free Workplace.