Senior AppSec Engineer: AI-Powered Security Champion

bonterra; United States; On-site; USD 100,000 - 130,000; Full time

Job summary

Bonterra is seeking a Senior Application Security Engineer based in the United States. You will embed with engineering teams to drive vulnerability remediation, build AI-powered workflows, and ensure secure software development across the product portfolio.

The role focuses on building and operating AI agents, securing CI/CD processes, and driving security ownership. Strong collaboration with developers and experience with SAST/SCA platforms are highly valued.

Qualifications

• Demonstrated experience building AI agents, LLM-powered workflows, or automated pipelines.
• Understanding of software vulnerability classes and how CVEs are assessed.
• Ability to translate security findings into language developers can act on.
• Familiarity with secure development practices and how security integrates into SDLC.

Responsibilities

• Report directly to the Head of Application Security.
• Build, extend, and operate AI-powered agents and workflows that automate vulnerability remediation tasks.
• Drive vulnerabilities to closure by working directly with development teams.
• Act as a security champion embedded across Bonterra's engineering organizations, building trust and normalizing secure development practices.
• Triage and prioritize findings from SAST, SCA, IaC scanners, filtering noise and surfacing what needs immediate attention.
• Integrate security validation into CI/CD pipelines and developer workflows.
• Support SOC 2, PCI-DSS, HIPAA, and other audits as needed.

Skills

AI agents

LLM-powered workflows

Vulnerability remediation

Developer communication

Tools

SAST/SCA platforms

Job description

Bonterra is seeking a Senior Application Security Engineer based in the United States. You will embed with engineering teams to drive vulnerability remediation, build AI-powered workflows, and ensure secure software development across the product portfolio.

The role focuses on building and operating AI agents, securing CI/CD processes, and driving security ownership. Strong collaboration with developers and experience with SAST/SCA platforms are highly valued.