SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
OpenGov is seeking an experienced Manager of Application Security to lead and grow the AppSec team while driving a secure-by-design culture across the engineering organization. This role combines technical expertise with people leadership, requiring both hands-on security knowledge and the ability to mentor and empower a high-performing team.
Key responsibilities include:
- Leading and mentoring the Application Security team to drive engagement, growth, and technical excellence
- Building and executing the organization's application security roadmap to strengthen security posture across all product suites and APIs
- Championing secure development practices by embedding OWASP ASVS and OWASP Top 10 guidance into coding standards, architecture reviews, and threat modeling
- Overseeing selection, deployment, and integration of AppSec tools (SAST, DAST, SCA, ASPM) into CI/CD pipelines
- Partnering with Engineering, DevOps, and Product teams to ensure secure coding, design reviews, and vulnerability management processes
- Reporting on risk metrics, remediation progress, and program effectiveness to senior leadership
- Fostering a collaborative, inclusive team culture that inspires innovation and continuous improvement
- Serving as the AppSec subject-matter expert for internal audits, customer reviews, and compliance (SOC 2, GovRAMP, FedRAMP)
OpenGov is the leader in AI and ERP solutions for local and state governments in the U.S., with more than 2,000 cities, counties, state agencies, school districts, and special districts relying on the OpenGov Public Service Platform. The company operates in a fast-paced, results-driven environment with 800+ employees globally, headquartered in San Francisco with offices including Pune.
REQUIREMENTS:
- 7+ years of combined experience in Application Security, Software Engineering, or related fields; 3+ years leading or managing security teams
- Deep understanding of OWASP ASVS, OWASP Top 10, and secure software development practices
- Hands-on experience with modern AppSec tools and frameworks (SAST, DAST, SCA, API security, ASPM)
- Proven ability to build and motivate high-performing teams, with strong mentoring and coaching skills
- Excellent communication, relationship-building, and stakeholder management abilities
- Strong problem-solving mindset with ability to influence across technical and non-technical teams
PREFERRED QUALIFICATIONS:
- MA/MS in a technology-related discipline
- Experience in a SaaS or cloud-native software company
- Familiarity with CI/CD pipelines and security automation
- Knowledge of compliance and regulatory frameworks relevant to software companies (SOC 2, GovRAMP, FedRAMP)
- Certifications such as CSSLP, CISSP, OSWE, or similar AppSec credentials
