Division Security Champion at Bentley Systems

Division Security Champion – Asset AnalyticsBentley Systems | Location: Flexible / US-RemoteRole SummaryBentley Systems is seeking a director level, Division Security Champion to lead application security across the Asset Analytics division, encompassing cloud-native web applications and AI/ML-driven platforms. This senior leadership role drives Secure Software Development Lifecycle (SSDLC) practices, improves product risk posture, and ensures secure delivery across SaaS and AI systems.ResponsibilitiesAct as the division’s Security Champion, leading a distributed network of security championsDefine and execute AppSec strategy aligned with Bentley’s enterprise programMeasure and reduce application risk across the portfolioLead DevSecOps and SSDLC practices including threat modeling, architecture reviews, and vulnerability managementSecure AI/ML systems including model lifecycle, data protection, and MLOps integrationOversee incident response, vulnerability remediation, forensics, post-mortems, and bug bounty processesManage third-party and open-source security riskBuild a security-first engineering culture across teamsWhat Success Looks LikeConsistent SSDLC adoption across all productsReduced risk and faster remediation timelinesEffective security champion networkSecure delivery of cloud-native and AI-powered applicationsBecoming the trusted security advisor for the divisionQualificationsRequired10+ years of experience in application or development security rolesSecurity certifications such as CISSP, GIAC, or OSCPExpertise in secure development, threat modeling, and cloud-native security including assessing security impact of PRs and using tools such as Burp Suite Pro to assess vulnerabilitiesDevSecOps and CI/CD security experienceStrong cross-functional leadership and communication skillsPreferredExperience securing AI/ML systems or MLOps pipelinesExperience in container hardening or K8s security best practicesExperience with multi-tenant SaaS platformsExperience with ISO27001, FedRAMP, SOC2, or similar frameworks#LI-CS1  #LI-REMOTE