Application Security Engineer

Responsibilities

• Embed security into CI/CD pipelines through automated security checks and scalable guardrails
• Drive adoption of secure coding best practices across engineering teams
• Lead threat modeling exercises for high-risk features and new architecture patterns
• Own and tune AppSec tooling including SAST, DAST, SCA, and container scanning
• Lead triage and root-cause analysis for vulnerabilities from bug bounties, pentests, and internal testing
• Support security reviews and remediation programs for GovRAMP and SOC 2 compliance
• Conduct manual reviews of critical code paths, APIs, and cloud components
• Advise on secure design patterns for microservices and cloud-native architectures
• Mentor engineering teams on secure design and modern AppSec patterns

Requirements

• 5+ years of application security, secure development, or software engineering experience
• Hands-on experience with SAST, DAST, SCA, secrets scanning, and CI/CD integration
• Expertise in OWASP Top 10, ASVS, and SANS CWE Top 25
• Ability to perform threat modeling, code review, and architecture analysis
• Experience partnering with Engineering to drive remediation and maturity improvements

Preferred Qualifications

• Experience in SaaS, multi-tenant systems, or high-scale cloud environments (AWS preferred)
• Familiarity with SOC 2, GovRAMP, and TX-RAMP
• Prior background in DevOps, software engineering, or cloud security

About the Company

OpenGov is the leader in AI and ERP solutions for local and state governments in the U.S., providing platforms for asset management, procurement, accounting, and more to help public sector organizations operate efficiently.