Senior Application Security Engineer

🕒 July 20

🇺🇸 United States – Remote

💵 $100k - $130k / year

⏰ Full Time

🟠 Senior

💻 Application Engineer

👻 Ghost score 11%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Bonterra

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

🤝 B2B

🤝 Non-profit

🌍 Social Impact

B2B • Non-profit • Social Impact

Bonterra is a company that provides purpose-built software solutions designed to enhance the impact and efficiency of nonprofits, corporations, foundations, and public agencies. Their products include tools for corporate social responsibility, strategic philanthropy, employee engagement, grants management, case management, and fundraising. Bonterra empowers organizations with the software, coaching, and expertise needed to maximize their social impact and streamline their operations. The company focuses on serving changemakers aiming to improve social good, expand their supporter base, and achieve greater community outcomes.

📋 Description

• Report directly to the Head of Application Security. • Build, extend, and operate AI-powered agents and workflows that automate vulnerability remediation tasks. • Drive vulnerabilities to closure by working directly with development teams. • Act as a security champion embedded across Bonterra's engineering organizations, building trust and normalizing secure development practices. • Triage and prioritize findings from SAST, SCA, IaC scanners, filtering noise and surfacing what needs immediate attention. • Integrate security validation into CI/CD pipelines and developer workflows. • Support SOC 2, PCI-DSS, HIPAA, and other audits as needed.

🎯 Requirements

• Demonstrated experience building AI agents, LLM-powered workflows, or automated pipelines. • Working knowledge of software vulnerability classes, how CVEs are assessed, and what good remediation looks like. • Understand how software gets built and where security integrates into the development process. • You can translate a security finding into language a developer can act on without a security background. • An extensive track record of building AI agents to solve real operational problems that accelerate outcomes. • Experience with SAST/SCA platforms at an engineering team level. • Prior work building or running a security champion program. • Familiarity with AWS security services or cloud environment security. • Knowledge of application security frameworks -- OWASP Top 10, NIST, CVSS scoring. • Previous software development experience.

🏖️ Benefits

• Health insurance • 401(k) matching • Flexible work hours • Paid time off • Professional development opportunities