Application Security Engineer

Nelnet is a diversified and innovative company committed to enriching lives through the power of service as a student loan servicer, professional services company, consumer loan originator and servicer, payments processor, renewable energy solutions, and K-12 and higher education expert. For over 40 years, Nelnet has been serving its customers, associates, and communities.

The perks of working at Nelnet go beyond our benefits package. When you join the Nelnet team, you're part of a community invested in the success of each individual. That support comes through in our work, as we are united by our mission of creating opportunities for people where they live, learn, and work.

We are looking for IT Software Engineers for the Nelnet Application Security team to develop and work collaboratively with innovative IT Delivery teams and Business Operational areas implement the NDS Application Security program, improve the security posture of our development process, and coach development teams on application security topics.

JOB RESPONSIBILITIES:

•    Develop and maintain applications to support our application security concepts

•    Develop security reference implementations

•    Integrate security into our build and deploy pipelines

•    Maintain security controls and measure implementation across technology platforms, .NET, Java, Cloud, etc

•    Enable controls to monitor our development supply chain (i.e.third party dependencies)

•    Remediate and facilitate the resolution of vulnerabilities

•    Participate and facilitate Risk Assessment and Threat Modeling

•    Serve as an auditing, consulting, and training resource to all Nelnet product teams
•    Perform appropriate vulnerability scanning – static and dynamic analysis
•    Work with external entities that are performing vulnerability scans
•    Participate in tool and vendor selection process from a security perspective.
•    Create and update learning resources for application security
•    Develop and present on application security topics for a wide variety of audiences
•    Stay informed about application security best practices across Nelnet development platforms including web, mobile, and cloud

Nelnet believes in a hybrid work environment that accommodates both in-office and remote work. This model promotes a positive work-life balance and culture, enabling in-person collaboration when possible while also providing benefits associated with remote work. The standard hybrid work schedule includes a 3/2 (in-office/work-from-home) split for associates that reside within 30 miles of an office. This is subject to change, based on manager discretion.

US Citizenship and the ability to obtain a 6C Federal security clearance are required for this role. Some travel may be required.

EDUCATION: 
•    BS / MS in Computer Science, Engineering, related discipline or equivalent experience

EXPERIENCE: 
•    Minimum 2 years of experience in web application software development.
•    Minimum 1 years of experience focused on Application Security.

COMPETENCIES – SKILLS/KNOWLEDGE/ABILITIES:
•    Understanding of a variety of application development architectures, platforms, methodologies, and supporting operating system
•    Experience identifying and protecting against web application and web-service security vulnerabilities including those found in the OWASP Top 10 and CWE Top 25
•    Knowledge of authentication and authorization, cryptography, and API security
•    Ability to identify, triage, manage, and remediate security vulnerabilities
•    Experience with build processes and CI/CD
•    Knowledge of cloud technologies
•    Experience with web and API development technologies such as .NET, Java, NPM, Angular, React
•    Strong verbal and written communication skills
•    Strong consensus building, multi-tasking, interpersonal, and analytical skills
•    Enjoys looking for and building efficiencies into the team, takes ownership

Pay range for this position is $80,000 -$110,000 annually

Our benefits package includes medical, dental, vision, HSA and FSA, generous earned time off, 401K/student loan repayment, life insurance & AD&D insurance, employee assistance program, employee stock purchase program, tuition reimbursement, performance-based incentive pay, short- and long-term disability, and a robust wellness program. Click here to learn more about our benefits: LINK.

Nelnet is committed to providing a welcoming and respectful workplace where all associates have the opportunity to succeed. As an Equal O