Senior Application Security Engineer

bonterra; United States; On-site; USD 100,000 - 130,000; Full time

Job summary

Bonterra is seeking a Senior Application Security Engineer based in the United States. You will embed with engineering teams to drive vulnerability remediation, build AI-powered workflows, and ensure secure software development across the product portfolio.

The role focuses on building and operating AI agents, securing CI/CD processes, and driving security ownership. Strong collaboration with developers and experience with SAST/SCA platforms are highly valued.

Qualifications

• Demonstrated experience building AI agents, LLM-powered workflows, or automated pipelines.
• Understanding of software vulnerability classes and how CVEs are assessed.
• Ability to translate security findings into language developers can act on.
• Familiarity with secure development practices and how security integrates into SDLC.

Responsibilities

• Report directly to the Head of Application Security.
• Build, extend, and operate AI-powered agents and workflows that automate vulnerability remediation tasks.
• Drive vulnerabilities to closure by working directly with development teams.
• Act as a security champion embedded across Bonterra's engineering organizations, building trust and normalizing secure development practices.
• Triage and prioritize findings from SAST, SCA, IaC scanners, filtering noise and surfacing what needs immediate attention.
• Integrate security validation into CI/CD pipelines and developer workflows.
• Support SOC 2, PCI-DSS, HIPAA, and other audits as needed.

Skills

AI agents

LLM-powered workflows

Vulnerability remediation

Developer communication

Tools

SAST/SCA platforms

Job description

US Based Salary: $100,000 - $130,000 DOE

About Us

Bonterra exists to propel every doer of good to their peak impact. We measure that impact against our vision to increase the giving rate as a percentage of GDP from 2% to 3% by 2033. We know that this goal is lofty, but we are confident that the right technology and expertise will strengthen trust in the sector, allowing the social good industry to accelerate growth and reach peak impact. Bonterra's differentiated, end-to-end solutions collectively support a unique network of over 20,000 customers, including over 16,000 nonprofit organizations and over 50 percent of Fortune 100 companies. Learn more at bonterratech.com.

About the Role

As a Senior Application Security Engineer at Bonterra, you will be embedded across the Engineering organization, partnering directly with development teams to drive vulnerability remediation, build security ownership, and close the gap between identified and fixed. You will also build and operate AI agents and workflows that make that work scale across the product portfolio.

This is a technical role. The ideal candidate has engineering instincts, can build AI-powered workflows, and knows how to work alongside development teams rather than audit them from the outside.

What you'll do

• Report directly to the Head of Application Security.
• Build, extend, and operate AI-powered agents and workflows that automate vulnerability remediation tasks.
• Drive vulnerabilities to closure by working directly with development teams.
• Act as a security champion embedded across Bonterra's engineering organizations, building trust and normalizing secure development practices.
• Triage and prioritize findings from SAST, SCA, IaC scanners, filtering noise and surfacing what needs immediate attention.
• Integrate security validation into CI/CD pipelines and developer workflows.
• Support SOC 2, PCI-DSS, HIPAA, and other audits as needed.

Requirements

• Demonstrated experience building AI agents, LLM-powered workflows, or automated pipelines.
• Working knowledge of software vulnerability classes, how CVEs are assessed, and what good remediation looks like.
• Understand how software gets built and where security integrates into the development process.
• You can translate a security finding into language a developer can act on without a security background.

What sets you apart

• An extensive track record of building AI agents to solve real operational problems that accelerate outcomes.
• Experience with SAST/SCA platforms at an engineering team level.
• Prior work building or running a security champion program.
• Familiarity with AWS security services or cloud environment security.
• Knowledge of application security frameworks -- OWASP Top 10, NIST, CVSS scoring.
• Previous software development experience.

At Bonterra, we’re building AI-powered tools to solve real human challenges—and we want teammates who share that enthusiasm. We value people who will champion AI and bring diverse perspectives from different industries, backgrounds, and cultures. Together, we create AI that breaks down barriers, empowered communities, and delivers better outcomes

At this time, we are unable to consider candidates who require current or future sponsorship for employment authorization.

____________________________________________________________________________________

Our Culture

At Bonterra, we’re innovating with a higher purpose: to increase giving to 3% of US GDP by 2033, creating $573 billion more in global impact every year. At Bonterra, we foster an inclusive, equitable culture where every team member belongs and contributes to meaningful impact. Read more about our values and culture here.

Compensation & Benefits

We offer a comprehensive benefits package that supports your health, well-being and growth - explore full details here.

Compensation and benefits for this role apply to full-time employees in the United States and may vary based on local standards, laws and norms. Pay is determined by location, skills, experience, and education, and is one part of Bonterra’s total rewards package, which may also include bonuses, incentives, equity, and a comprehensive benefits program.

____________________________________________________________________________________

Equal Opportunity & Accommodations

At Bonterra, we are proud to be an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. We provide equal employment opportunities without regard to race, color, religion, sex (including pregnancy, sexual orientation or gender identity), national origin, age, disability, veteran status or any other characteristic protected by law.

If you require a reasonable accommodation during the application process, please submit a request.