Manager, Application Security

📋 Job Overview

OpenGov is the leader in AI and ERP solutions for local and state governments in the U.S. More than 2,000 cities, counties, state agencies, school districts, and special districts rely on the OpenGov Public Service Platform to operate efficiently, adapt to change, and strengthen the public trust. Category-leading products include enterprise asset management, procurement and contract management, accounting and budgeting, billing and revenue management, permitting and licensing, and transparency and open data. These solutions come together in the OpenGov ERP, allowing public sector organizations to focus on priorities and deliver maximum ROI with every dollar and decision in sync. Learn about OpenGov’s mission to power more effective and accountable government and the vision of high-performance government for every community at OpenGov.com.

🏢 About OpenGov

OpenGov is seeking an experienced Manager of Application Security to lead our growing AppSec team. This role blends technical expertise with people leadership, driving a secure-by-design culture across our engineering organization while mentoring and empowering a high-performing team.

🎯 The Role

You will oversee the strategy and execution of application security initiatives, embedding industry-leading standards such as OWASP into our development lifecycle. The ideal candidate is collaborative, approachable, and an excellent communicator, capable of building trust with engineers, product leaders, and executives alike.

✅ Key Responsibilities

• Lead and mentor the Application Security team to drive engagement, growth, and technical excellence.
• Build and execute the organization’s application security roadmap to strengthen the security posture of all product suites and APIs.
• Champion secure development practices by embedding OWASP ASVS and OWASP Top 10 guidance into coding standards, architecture reviews, and threat modeling.
• Oversee the selection, deployment, and integration of AppSec tools (e.g., SAST, DAST, SCA, ASPM) into CI/CD pipelines.
• Partner with Engineering, DevOps, and Product to ensure secure coding, design reviews, and vulnerability management processes are followed.
• Report on risk metrics, remediation progress, and program effectiveness to senior leadership and stakeholders.
• Foster a collaborative, inclusive, and fun team culture that inspires innovation and continuous improvement.
• Serve as the AppSec subject-matter expert for internal audits, customer reviews, and compliance (SOC 2, GovRAMP, FedRAMP, etc.).

📌 Required Qualifications

• 7+ years of combined experience in Application Security, Software Engineering, or related fields; 3+ years leading or managing security teams.
• Deep understanding of OWASP ASVS, OWASP Top 10, and secure software development practices.
• Hands-on experience with modern AppSec tools and frameworks (SAST, DAST, SCA, API security, ASPM).
• Proven ability to build and motivate high-performing teams, with strong mentoring and coaching skills.
• Excellent communication, relationship-building, and stakeholder management abilities.
• Strong problem-solving mindset with the ability to influence across technical and non-technical teams.

⭐ Desirable Experience

• MA/MS in a technology related discipline
• Experience in a SaaS or cloud-native software company.
• Familiarity with CI/CD pipelines and security automation.
• Knowledge of compliance and regulatory frameworks relevant to software companies (SOC 2, GovRAMP, FedRAMP, etc.).
• Certifications such as CSSLP, CISSP, OSWE, or similar AppSec credentials.

🎁 Benefits

Comprehensive healthcare options for individuals and families
Flexible vacation policy and paid company holidays
401(k) with company match
Paid parental leave, wellness stipends, and HSA contributions
Professional development and growth opportunities
A collaborative office environment with weekly catered lunches.

🛂 Visa & Eligibility