How much experience is required?

At least 7 years of relevant experience for this Manager, Application Security role.

What's the tech stack?

Joblaze extracted these technologies from the posting: API security, ASPM, DAST, OWASP, SAST, SCA.

What seniority level is this role?

OpenGov targets lead candidates for this position.

Is this full-time or contract?

Full-time for this Manager, Application Security role at OpenGov.

Joblaze summary

The Manager of Application Security at OpenGov is responsible for leading the AppSec team and implementing security initiatives that integrate industry standards into the development lifecycle. This role requires a strong background in application security, including familiarity with OWASP guidelines and modern security tools. Ideal candidates will have significant experience in security leadership and a collaborative approach to working with cross-functional teams. OpenGov emphasizes a culture of innovation and accountability, making this position suitable for those looking to make a meaningful impact in the public sector.

Joblaze insights

Listed today — first seen on Joblaze October 3, 2026. Last confirmed on OpenGov's careers page October 3, 2026.

Quick facts

How much experience is required?: At least 7 years of relevant experience for this Manager, Application Security role.
What's the tech stack?: Joblaze extracted these technologies from the posting: API security, ASPM, DAST, OWASP, SAST, SCA.
What seniority level is this role?: OpenGov targets lead candidates for this position.
Is this full-time or contract?: Full-time for this Manager, Application Security role at OpenGov.

From the original posting

Summary:

OpenGov is seeking an experienced Manager of Application Security to lead our growing AppSec team. This role blends technical expertise with people leadership, driving a secure-by-design culture across our engineering organization while mentoring and empowering a high-performing team.

You will oversee the strategy and execution of application security initiatives, embedding industry-leading standards such as OWASP into our development lifecycle. The ideal candidate is collaborative, approachable, and an excellent communicator, capable of building trust with engineers, product leaders, and executives alike.

Responsibilities:

Lead and mentor the Application Security team to drive engagement, growth, and technical excellence.
Build and execute the organization’s application security roadmap to strengthen the security posture of all product suites and APIs.
Champion secure development practices by embedding OWASP ASVS and OWASP Top 10 guidance into coding standards, architecture reviews, and threat modeling.
Oversee the selection, deployment, and integration of AppSec tools (e.g., SAST, DAST, SCA, ASPM) into CI/CD pipelines.
Partner with Engineering, DevOps, and Product to ensure secure coding, design reviews, and vulnerability management processes are followed.
Report on risk metrics, remediation progress, and program effectiveness to senior leadership and stakeholders.
Foster a collaborative, inclusive, and fun team culture that inspires innovation and continuous improvement.
Serve as the AppSec subject-matter expert for internal audits, customer reviews, and compliance (SOC 2, GovRAMP, FedRAMP, etc.).

Required Qualifications:

7+ years of combined experience in Application Security, Software Engineering, or related fields; 3+ years leading or managing security teams.
Deep understanding of OWASP ASVS, OWASP Top 10, and secure software development practices.
Hands-on experience with modern AppSec tools and frameworks (SAST, DAST, SCA, API security, ASPM).
Proven ability to build and motivate high-performing teams, with strong mentoring and coaching skills.
Excellent communication, relationship-building, and stakeholder management abilities.
Strong problem-solving mindset with the ability to influence across technical and non-technical teams.

Preferred Qualifications:

MA/MS in a technology related discipline
Experience in a SaaS or cloud-native software company.
Familiarity with CI/CD pipelines and security automation.
Knowledge of compliance and regulatory frameworks relevant to software companies (SOC 2, GovRAMP, FedRAMP, etc.).
Certifications such as CSSLP, CISSP, OSWE, or similar AppSec credentials.

Why OpenGov?

Comprehensive healthcare options for individuals and families
Flexible vacation policy and paid company holidays
401(k) with company match
Professional development and growth opportunities

Standard company text repeated across OpenGov's postings is omitted here.