Jobs at Black Duck

The role involves developing analytical data pipelines, participating in architectural decisions, and leading projects while collaborating with R&D and engineering teams.

Lead and own the enterprise vulnerability management program across cloud, endpoints, and applications: design scanning and automated patching architectures, prioritize risk using CVSS/EPSS/KEV, enforce remediation SLAs, integrate with ITSM/CMDB and CI/CD pipelines, produce executive metrics, mentor staff, and maintain audit-ready evidence.

Design, build, and operate resilient, secure GCP-based infrastructure for customer-facing SaaS. Own networking, CI/CD/GitOps, Kubernetes deployments, monitoring, autoscaling, incident response, and compliance. Collaborate cross-functionally, use AI/LLM tools to automate runbooks and diagnostics, and ensure high availability and performance.

Lead the design and development of data services, manage data reliability, create data models, and ensure data products support ML workflows.

Support threat data collection, analysis, and IOC pipelines; draft threat actor profiles and intelligence products; integrate indicators with SIEM/EDR (Sumo Logic, CrowdStrike); monitor package registries and CI/CD for supply-chain threats; assist CSIRT, Vulnerability Management, and investigations; apply STIX and MITRE ATT&CK mapping under senior guidance.