Note: The job is a remote job and is open to candidates in USA. Bonterra is a company dedicated to increasing the giving rate in the social good sector. As a Principal Security Engineer, you will collaborate with development teams to enhance security practices, automate vulnerability remediation, and integrate security into development workflows.
Responsibilities
- Report directly to the Head of Application Security
- Build, extend, and operate AI-powered agents and workflows that automate vulnerability remediation tasks
- Drive vulnerabilities to closure by working directly with development teams
- Act as a security champion embedded across Bonterra's engineering organizations, building trust and normalizing secure development practices
- Triage and prioritize findings from SAST, SCA, IaC scanners, filtering noise and surfacing what needs immediate attention
- Integrate security validation into CI/CD pipelines and developer workflows
- Support SOC 2, PCI-DSS, HIPAA, and other audits as needed
Skills
- Demonstrated experience building AI agents, LLM-powered workflows, or automated pipelines
- Working knowledge of software vulnerability classes, how CVEs are assessed, and what good remediation looks like
- Understand how software gets built and where security integrates into the development process
- You can translate a security finding into language a developer can act on without a security background
- An extensive track record of building AI agents to solve real operational problems that accelerate outcomes
- Experience with SAST/SCA platforms at an engineering team level
- Prior work building or running a security champion program
- Familiarity with AWS security services or cloud environment security
- Knowledge of application security frameworks -- OWASP Top 10, NIST, CVSS scoring
- Previous software development experience
Benefits
- We offer a comprehensive benefits package that supports your health, well-being and growth - explore full details here.
- Bonterra's total rewards package, which may also include bonuses, incentives, equity, and a comprehensive benefits program.
Company Overview