App Security Manager (Volunteer)

Organization: Mentor A Promise (MAP)

Division: PromiseShield (IT, Security & Privacy)

Location: Fully Remote | United States

Time Commitment: Approximately 5–10 hours per week

Minimum Commitment: 6 months

Reports To: Director of Security Engineering & Infrastructure Resilience

Compensation: Unpaid Volunteer Position

About Mentor A Promise

Mentor A Promise (MAP) is a nonprofit organization dedicated to supporting young people experiencing housing instability through mentorship, educational support, and community-based programs.

As MAP expands its programs, communications, publishing initiatives, campaigns, and digital platforms, we are building the leadership and operational structure needed to support that growth.

About the Role

Mentor A Promise is seeking an experienced App Security Manager to join our PromiseShield division and lead application security practices across MAP's digital products and platforms.

This is both a strategic leadership and hands-on technical role. The App Security Manager will help establish secure software development standards, identify and address application vulnerabilities, and integrate security practices into development workflows.

The ideal candidate has a strong background in application security engineering, secure software development, and vulnerability management, along with the ability to collaborate with and mentor volunteer developers.

Key Responsibilities

• Application Security Strategy: Lead the implementation of secure software development lifecycle (SSDLC) standards across MAP's applications and web platforms.
• Security Assessments: Conduct security code reviews, architecture risk assessments, and threat modeling for new features and applications.
• Security Testing: Manage and conduct static application security testing (SAST), dynamic application security testing (DAST), vulnerability scans, and penetration testing oversight.
• Vulnerability Management: Work with development teams to identify, prioritize, and remediate application vulnerabilities, including risks outlined in the OWASP Top 10.
• Secure Development Standards: Establish secure coding guidelines, API security standards, and authentication and authorization practices.
• Software Supply Chain Security: Identify and manage security risks associated with third-party libraries, dependencies, and open-source software.
• Technical Leadership: Provide guidance, security training, and mentorship to volunteer software engineers and developers.
• Cross-Team Collaboration: Work with development leads, DevOps contributors, UI/UX designers, and IT operations to integrate security into MAP's digital initiatives.

Required Qualifications

• Demonstrated experience in application security engineering, vulnerability management, or secure software design.
• Strong understanding of web application security, API security, authentication protocols (OAuth, JWT, SAML), and the OWASP Top 10.
• Hands-on experience with application security testing tools, such as SAST, DAST, software composition analysis (SCA), dependency scanners, or Burp Suite.
• Ability to review code in common programming languages and frameworks, such as Python, JavaScript/Node.js, React, or PHP.
• Experience identifying security vulnerabilities and collaborating with development teams to implement solutions.
• Strong communication, problem-solving, and organizational skills.
• Ability to work independently and collaborate effectively within a remote volunteer team.

Preferred Qualifications

The following experience is beneficial but not required:

• Experience with nonprofit, education, or mission-driven organizations.
• Experience securing open-source platforms, custom web portals, or community-based digital applications.
• Relevant security certifications, such as CASE, CSSLP, GWAPT, OSWE, or CISSP.
• Experience mentoring developers or leading application security initiatives.

Working Relationships

The App Security Manager reports to the Director of Security Engineering & Infrastructure Resilience and collaborates with software development leads, DevOps contributors, UI/UX designers, and IT operations teams.

Time Commitment & Location

• Schedule: Approximately 5–10 hours per week, with flexible scheduling.
• Duration: Minimum six-month commitment.
• Location: Fully remote, within the United States.
• Compensation: This is an unpaid volunteer opportunity.

Applicants should be able to consistently meet their volunteer commitments, participate in required team meetings, and communicate regularly with their teams.

Why Volunteer With MAP?

This opportunity allows experienced security professionals to apply their technical expertise to meaningful nonprofit work while helping strengthen the systems and platforms that support MAP's mission.

Volunteers will have the opportunity to:

• Help shape application security practices within a growing nonprofit organization.
• Lead meaningful security initiatives and collaborate with professionals across technical disciplines.
• Contribute to digital platforms supporting youth experiencing housing instability.
• Share knowledge, mentor fellow volunteers, and support a mission-driven team.

How to Apply

Interested candidates should submit:

• Current Resume: Highlighting relevant application security, engineering, or security leadership experience.
• Brief Cover Letter: Describing your relevant experience and interest in supporting Mentor A Promise.

Applications will be reviewed on a rolling basis.

Volunteer Eligibility & Sponsorship

Volunteer opportunities are currently limited to individuals residing in the United States due to legal, safeguarding, data privacy, and programmatic requirements.

Mentor A Promise does not provide visa or immigration sponsorship for volunteer positions.

Please note: This is an unpaid volunteer opportunity requiring approximately 5–10 hours per week and a minimum six-month commitment.