Lead Security Engineer

Bonterra

Security Engineer at Bonterra driving vulnerability remediation with AI-powered workflows. Collaborating with engineering teams to integrate security practices throughout development.

Posted 7/28/2026full-timeRemote • 🇺🇸 United StatesSenior💰 $117,000 - $150,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in building AI-powered agents and workflows for vulnerability remediation, integrating security practices into development processes, and supporting compliance with industry standards such as SOC 2 and PCI-DSS.

Highest-signal resume keywords

AI Agent DevelopmentVulnerability RemediationSAST/SCA ExperienceApplication Security FrameworksSecurity Champion Program

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

AI-Powered WorkflowsVulnerability AssessmentCI/CD IntegrationSoftware DevelopmentSecurity Finding Translation

Soft Skills

CollaborationTrust BuildingCommunication

Tools & Technologies

SAST PlatformsSCA PlatformsAWS Security Services

Industry Keywords

SOC 2PCI-DSSHIPAAOWASP Top 10NISTCVSS

Tech Stack

Tools & technologies

AWSCloud

About the role

Key responsibilities & impact

Report directly to the Head of Application Security.
Build, extend, and operate AI-powered agents and workflows that automate vulnerability remediation tasks.
Drive vulnerabilities to closure by working directly with development teams.
Act as a security champion embedded across Bonterra's engineering organizations, building trust and normalizing secure development practices.
Triage and prioritize findings from SAST, SCA, IaC scanners, filtering noise and surfacing what needs immediate attention.
Integrate security validation into CI/CD pipelines and developer workflows.
Support SOC 2, PCI-DSS, HIPAA, and other audits as needed.

Requirements

What you’ll need

Demonstrated experience building AI agents, LLM-powered workflows, or automated pipelines.
Working knowledge of software vulnerability classes, how CVEs are assessed, and what good remediation looks like.
Understand how software gets built and where security integrates into the development process.
You can translate a security finding into language a developer can act on without a security background.
Extensive track record of building AI agents to solve real operational problems that accelerate outcomes.
Experience with SAST/SCA platforms at an engineering team level.
Prior work building or running a security champion program.
Familiarity with AWS security services or cloud environment security.
Knowledge of application security frameworks -- OWASP Top 10, NIST, CVSS scoring.
Previous software development experience.

Benefits

Comp & perks

Comprehensive benefits package that supports your health, well-being and growth