Jobs at Black Duck

The role involves developing analytical data pipelines, participating in architectural decisions, and leading projects while collaborating with R&D and engineering teams.

Lead and own the enterprise vulnerability management program across cloud, endpoints, and applications: design scanning and automated patching architectures, prioritize risk using CVSS/EPSS/KEV, enforce remediation SLAs, integrate with ITSM/CMDB and CI/CD pipelines, produce executive metrics, mentor staff, and maintain audit-ready evidence.

Design, build, and operate resilient, secure GCP-based infrastructure for customer-facing SaaS. Own networking, CI/CD/GitOps, Kubernetes deployments, monitoring, autoscaling, incident response, and compliance. Collaborate cross-functionally, use AI/LLM tools to automate runbooks and diagnostics, and ensure high availability and performance.

Lead the design and development of data services, manage data reliability, create data models, and ensure data products support ML workflows.

Serve as a strategic technical partner for key customers to drive adoption of Black Duck AppSec solutions. Integrate tools into CI/CD pipelines, provide role-specific training, resolve and escalate technical issues, advise on compliance and AppSec strategy, advocate internally for customers, and optimize usage to realize value.