Senior Application Security Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Directly report to the Head of Application Security.

• Develop, enhance, and manage AI-driven agents and workflows that automate the process of vulnerability remediation.

• Collaborate with development teams to ensure vulnerabilities are addressed and resolved.

• Serve as a security advocate within Bonterra's engineering teams, fostering trust and promoting secure development practices.

• Assess and prioritize results from SAST, SCA, and IaC scanners, eliminating irrelevant findings and highlighting those requiring urgent attention.

• Incorporate security validation into CI/CD workflows and developer processes.

• Assist with SOC 2, PCI-DSS, HIPAA, and other necessary audits.

⛳️ Requirements

• Proven experience in developing AI agents, LLM-powered workflows, or automated pipelines.

• Solid understanding of software vulnerability categories, CVE assessment processes, and effective remediation strategies.

• Knowledge of software development processes and the integration of security within those processes.

• Ability to convey security findings in a manner that is actionable for developers lacking a security background.

• A strong history of creating AI agents that address genuine operational challenges and improve outcomes.

• Experience with SAST/SCA tools at the level of engineering teams.

• Previous involvement in establishing or managing a security champion program.

• Familiarity with AWS security services or security in cloud environments.

• Understanding of application security frameworks, including OWASP Top 10, NIST, and CVSS scoring.

• Background in software development.

🏝️ Benefits

• Health insurance

• 401(k) matching

• Flexible work hours

• Paid time off

• Professional development opportunities