Manager, Application Security
About this job
OpenGov is a leading provider of AI and ERP solutions designed for local and state governments across the United States. Thousands of public sector agencies rely on the OpenGov Public Service Platform to enhance efficiency, adapt to changes, and build public trust through category-leading products spanning asset management, budgeting, and permitting. As the Manager of Application Security, you will lead and mentor a growing security team while shaping the organization's overall application security strategy. This role requires a unique blend of technical expertise and people leadership to foster a secure-by-design culture across engineering. A normal day involves guiding security initiatives, integrating OWASP standards into the development lifecycle, collaborating with engineering and product teams on architecture reviews and threat modeling, overseeing AppSec tools within CI/CD pipelines, and reporting risk metrics to leadership.
Responsibilities
- Lead and mentor the Application Security team to foster engagement and technical excellence.
- Build and execute the application security roadmap to secure product suites and APIs.
- Promote secure development practices using OWASP ASVS and OWASP Top 10 guidelines.
- Oversee the deployment and integration of AppSec tools like SAST, DAST, and SCA into pipelines.
- Partner with Engineering, DevOps, and Product for secure coding and vulnerability management.
- Report risk metrics and remediation progress to senior stakeholders and leadership.
- Act as the subject-matter expert for compliance frameworks, internal audits, and customer reviews.
Requirements
- 7+ years of combined experience in Application Security, Software Engineering, or related fields.
- 3+ years of experience leading or managing security teams.
- Deep understanding of OWASP ASVS, OWASP Top 10, and secure software development.
- Hands-on experience with modern AppSec tools and frameworks such as SAST, DAST, SCA, and API security.
- Proven ability to build, motivate, and mentor high-performing teams.
- Excellent communication, relationship-building, and stakeholder management skills.
- Strong problem-solving mindset with the ability to influence technical and non-technical teams.
Good to have
- Experience working in a SaaS or cloud-native software company.
- Familiarity with CI/CD pipelines and security automation.
- Knowledge of compliance frameworks like SOC 2, GovRAMP, and FedRAMP.
- Relevant security certifications such as CSSLP, CISSP, or OSWE.
Who should apply
This role is ideal for experienced security professionals with a strong background in application security and people management. Candidates who enjoy blending technical strategy with team leadership, mentoring engineers, and collaborating across departments will thrive here. You should have a solid grasp of secure coding standards and a passion for protecting software used by public sector agencies. This position requires several years of industry experience and is not suited for freshers.
Frequently asked questions
What is the primary mission of OpenGov as mentioned in the Manager, Application Security role?
OpenGov focuses on powering more effective and accountable government through AI and ERP solutions for state and local agencies.
What leadership duties are involved in the Manager, Application Security position?
The role involves leading, mentoring, and growing the Application Security team while building a secure-by-design engineering culture.
What technical standards must the Manager, Application Security champion?
The manager must champion secure development practices by embedding OWASP ASVS and OWASP Top 10 guidance into coding standards and reviews.
What kind of professional background is required for the Manager, Application Security at OpenGov?
Candidates need over seven years of combined experience in application security or software engineering, including at least three years in a leadership role.
Rojgar Point lists this job for information. Always apply on the official company page and never pay anyone for a job.