Role Summary
- Key Responsibilities :
- Embed security into CI/CD pipelines through scalable guardrails, automated security checks, and continuous improvements to developer workflows.
- Drive adoption of secure coding best practices across engineering teams through tooling, guidance, and direct partnership.
- Lead threat modeling exercises for high-risk features and new architecture patterns.
- Own, maintain, and tune AppSec tooling including SAST, DAST, SCA, secrets scanning, container scanning, and dependency management.
- Partner with DevOps to ensure automated testing integrates into build, test, and deploy workflows with high signal-to-noise and mínimal developer friction.
- Evaluate emerging technologies and automation opportunities to strengthen AppSec capabilities.- Ensure timely remediation through strong cross-functional partnership, driving the right balance of risk, velocity, and operational maturity.
- Support security reviews, pen test scoping, and remediation programs tied to GovRAMP, SOC 2, and customer requirements.
- Conduct manual reviews of critical code paths, APIs, backend services, and cloud components to identify security defects that automation may miss.
- Advise on secure design patterns for microservices, cloud-native architectures, authentication/authorization mechanisms, secrets management, and data protection.- Perform deep-dive analysis of new vulnerabilities, exploit techniques, frameworks, and supply-chain risks affecting our tech stack.
- Mentor engineering teams on secure design, secure coding, and modern AppSec patterns.
- Lead internal workshops, brown bags, and knowledge-sharing sessions.
- Contribute to internal AppSec documentation, policies, and secure development standards.
Qualifications Required :
- Hands-on experience with SAST, DAST, SCA, secrets scanning, container scanning, and CI/CD integration.
- Expertise in OWASP Top 10, ASVS, SANS CWE Top 25, and secure coding principles.
- Ability to perform threat modeling, code review, and architecture analysis.
- Experience partnering with Engineering to drive remediation and long-term maturity improvements.
Preferred :
- Experience in SaaS, multi-tenant systems, or high-scale cloud environments (AWS preferred).
- Familiarity with SOC 2, GovRAMP, & TX-RAMP.
- Prior background in DevOps, software engineering, or cloud security.
Why OpenGov? : A Mission That Matters.
At OpenGov, public service is personal. We are passionate about our mission to power more effective and accountable government. Government that operates efficiently, adapts to change, and strengthens public trust. Some people say this is boring. We think it’s the core of our democracy.
Opportunity to Innovate
The next great wave of innovation is unfolding with AI, and it will impact everything—from the way we work to the way governments interact with their residents. Join a trusted team with the passion, technology, and expertise to drive innovation and bring AI to local government. We’ve touched 2,000 communities so far, and we’re just getting started.
A Team of Passionate, Driven People
This isn’t your typical 9-to-5 job; we operate in a fast-paced, results-driven environment where impact matters more than simply clocking in and out. Our global team of 800+ employees is united in our commitment to challenge the status quo. OpenGov is headquartered in San Francisco and has offices in Atlanta, Boston, Chicago, Dubuque, Dallas, and Pune.
A Place to Make Your Mark
We pride ourselves on our performance-based culture, where every employee is encouraged to jump in head-first and take action to help us improve. If you have a great idea, we want to hear it. Excellent performance is recognized and rewarded, and we love to promote from within.
Benefits That Work for You
Enjoy an award-winning workplace with the advantages to match, including:
- Comprehensive healthcare options for individuals and families
- Flexible vacation policy and paid company holidays
- 401(k) with company match
- Paid parental leave, wellness stipends, and HSA contributions
- Professional development and growth opportunities
- A collaborative office environment with weekly catered lunches.
📌 Sr. Application Security Engineer (Pune)
🏢 OpenGov
📍 Pune