Division Security Champion

Division Security Champion – Asset Analytics

Bentley Systems | Location: Flexible / US-Remote

Role Summary

Bentley Systems is seeking a director level, Division Security Champion to lead application security across the Asset Analytics division, encompassing cloud-native web applications and AI/ML-driven platforms. This senior leadership role drives Secure Software Development Lifecycle (SSDLC) practices, improves product risk posture, and ensures secure delivery across SaaS and AI systems.

Responsibilities

• Act as the division’s Security Champion, leading a distributed network of security champions


• Define and execute AppSec strategy aligned with Bentley’s enterprise program


• Measure and reduce application risk across the portfolio


• Lead DevSecOps and SSDLC practices including threat modeling, architecture reviews, and vulnerability management


• Secure AI/ML systems including model lifecycle, data protection, and MLOps integration


• Oversee incident response, vulnerability remediation, forensics, post-mortems, and bug bounty processes


• Manage third-party and open-source security risk


• Build a security-first engineering culture across teams

What Success Looks Like

• Consistent SSDLC adoption across all products


• Reduced risk and faster remediation timelines


• Effective security champion network


• Secure delivery of cloud-native and AI-powered applications


• Becoming the trusted security advisor for the division

Qualifications

Required

• 10+ years of experience in application or development security roles


• Security certifications such as CISSP, GIAC, or OSCP


• Expertise in secure development, threat modeling, and cloud-native security including assessing security impact of PRs and using tools such as Burp Suite Pro to assess vulnerabilities


• DevSecOps and CI/CD security experience


• Strong cross-functional leadership and communication skills

Preferred

• Experience securing AI/ML systems or MLOps pipelines


• Experience in container hardening or K8s security best practices


• Experience with multi-tenant SaaS platforms


• Experience with ISO27001, FedRAMP, SOC2, or similar frameworks

#LI-CS1  #LI-REMOTE