Division Security Champion

Location: Flexible / US-Remote

Role Summary

Bentley Systems is seeking a director level, Division Security Champion to lead application security across the Asset Analytics division, encompassing cloud-native web applications and AI/ML-driven platforms. This senior leadership role drives Secure Software Development Lifecycle (SSDLC) practices, improves product risk posture, and ensures secure delivery across SaaS and AI systems.

Responsibilities:

- Act as the division’s Security Champion, leading a distributed network of security champions
- Define and execute AppSec strategy aligned with Bentley’s enterprise program
- Measure and reduce application risk across the portfolio
- Lead DevSecOps and SSDLC practices including threat modeling, architecture reviews, and vulnerability management
- Secure AI/ML systems including model lifecycle, data protection, and MLOps integration
- Oversee incident response, vulnerability remediation, forensics, post-mortems, and bug bounty processes
- Manage third-party and open-source security risk
- Build a security-first engineering culture across teams

What Success Looks Like:

- Consistent SSDLC adoption across all products
- Reduced risk and faster remediation timelines
- Effective security champion network
- Secure delivery of cloud-native and AI-powered applications
- Becoming the trusted security advisor for the division

Qualifications:

Required-

- 10+ years of experience in application or development security roles
- Security certifications such as CISSP, GIAC, or OSCP
- Expertise in secure development, threat modeling, and cloud-native security including assessing security impact of PRs and using tools such as Burp Suite Pro to assess vulnerabilities
- DevSecOps and CI/CD security experience
- Strong cross-functional leadership and communication skills

Preferred-

- Experience securing AI/ML systems or MLOps pipelines
- Experience in container hardening or K8s security best practices
- Experience with multi-tenant SaaS platforms
- Experience with ISO27001, FedRAMP, SOC2, or similar frameworks

#LI-CS1 #LI-REMOTE

This is a Home-based role.


What We Offer:

- Step into a collaborative work environment where ideas flourish, and teamwork propels us forward towards shared success.
- An attractive salary and benefits package.
- Bentley Impact Day: take a day off from work to volunteer with an organization of your choice.
- Celebrate milestone achievements and moments that matter through our colleague recognition award programs and our Bentley Achievers platform.
- A commitment to inclusion, belonging and colleague wellbeing through global initiatives and resource groups.
- Be part of a company committed to making a real difference by advancing the world’s infrastructure for better quality of life, where your contributions help build a more sustainable, connected, and resilient world. Discover our latest user success stories for an insight into our global impact.

Who We Are:

Bentley Systems (Nasdaq: BSY) is the infrastructure engineering software company. We provide innovative software to advance the world’s infrastructure – sustaining both the global economy and environment. Our industry-leading software solutions are used by professionals, and organizations of every size, for the design, construction, and operations of roads and bridges, rail and transit, water and wastewater, public works and utilities, buildings and campuses, mining, and industrial facilities. Our offerings, powered by the iTwin Platform for infrastructure digital twins, include MicroStation and Bentley Open applications for modeling and simulation, Seequent’s software for geoprofessionals, and Bentley Infrastructure Cloud encompassing ProjectWise for project delivery, SYNCHRO for construction management, and AssetWise for asset operations. Bentley Systems’ 5,200 colleagues generate annual revenues of more than $1 billion in 194 countries.

Request an Accommodation: