Director of AppSec & SSDLC for AI/ML Security - Remote

1000 Bentley Systems, Incorporated; Exton (PA); Remote; USD 180,000 - 240,000; Full time

Benefits offered by this job

Bentley Impact Day

Recognition programs

Inclusion & wellbeing initiatives

Global initiatives

Job summary

Bentley Systems is seeking a director-level Division Security Champion to lead application security across the Asset Analytics division. You will drive Secure Software Development Lifecycle (SSDLC) practices and elevate the security posture of cloud-native web apps and AI/ML platforms.

The role requires 10+ years in security, CISSP/GIAC/OSCP, and strong DevSecOps leadership. You will coordinate a security champion network, guide risk reduction, and embed security across SaaS and AI systems.

Qualifications

• 10+ years in application or development security roles.
• Security certifications such as CISSP, GIAC, or OSCP.
• DevSecOps and CI/CD security experience.
• Strong cross-functional leadership and communication skills.
• Experience securing AI/ML systems or MLOps pipelines.

Responsibilities

• Act as the division’s Security Champion, leading a distributed network of security champions.
• Define and execute AppSec strategy aligned with Bentley’s enterprise program.
• Measure and reduce application risk across the portfolio.
• Lead DevSecOps and SSDLC practices including threat modeling, architecture reviews, and vulnerability management.
• Secure AI/ML systems including model lifecycle, data protection, and MLOps integration.
• Oversee incident response, vulnerability remediation, forensics, post-mortems, and bug bounty processes.
• Manage third-party and open-source security risk.
• Build a security-first engineering culture across teams.

Skills

Security leadership

SSDLC

Threat modeling

Cross-functional leadership

Communication

Education

CISSP / GIAC / OSCP

Tools

Burp Suite Pro

Kubernetes security

Job description

Bentley Systems is seeking a director-level Division Security Champion to lead application security across the Asset Analytics division. You will drive Secure Software Development Lifecycle (SSDLC) practices and elevate the security posture of cloud-native web apps and AI/ML platforms.

The role requires 10+ years in security, CISSP/GIAC/OSCP, and strong DevSecOps leadership. You will coordinate a security champion network, guide risk reduction, and embed security across SaaS and AI systems.