[Remote] Lead Security Engineer
Note: The job is a remote job and is open to candidates in USA. Bonterra provides end-to-end technology solutions for nonprofit organizations and other customers in the social good sector. The Lead Security Engineer will partner with engineering teams to drive vulnerability remediation, build security ownership, and develop AI-powered agents and workflows that scale security operations across the product portfolio.
Responsibilities
- Report directly to the Head of Application Security
- Build, extend, and operate AI-powered agents and workflows that automate vulnerability remediation tasks
- Drive vulnerabilities to closure by working directly with development teams
- Act as a security champion embedded across Bonterra's engineering organizations, building trust and normalizing secure development practices
- Triage and prioritize findings from SAST, SCA, IaC scanners, filtering noise and surfacing what needs immediate attention
- Integrate security validation into CI/CD pipelines and developer workflows
- Support SOC 2, PCI-DSS, HIPAA, and other audits as needed
Skills
- Demonstrated experience building AI agents, LLM-powered workflows, or automated pipelines
- Working knowledge of software vulnerability classes, how CVEs are assessed, and what good remediation looks like
- Understand how software gets built and where security integrates into the development process
- You can translate a security finding into language a developer can act on without a security background
- At this time, we are unable to consider candidates who require current or future sponsorship for employment authorization
- An extensive track record of building AI agents to solve real operational problems that accelerate outcomes
- Experience with SAST/SCA platforms at an engineering team level
- Prior work building or running a security champion program
- Familiarity with AWS security services or cloud environment security
- Knowledge of application security frameworks -- OWASP Top 10, NIST, CVSS scoring
- Previous software development experience
Benefits
- A comprehensive benefits package that supports your health, well-being and growth
- Bonuses, incentives, equity, and a comprehensive benefits program may also be included as part of Bonterra’s total rewards package for full-time employees in the United States
Company Overview