Job Description

Black Duck Software, Inc. helps organizations build secure, high-quality software, minimizing risks while maximizing speed and productivity. Black Duck, a recognized pioneer in application security, provides SAST, SCA, and DAST solutions that enable teams to quickly find and fix vulnerabilities and defects in proprietary code, open source components, and application behavior. With a combination of industry-leading tools, services, and expertise, only Black Duck helps organizations maximize security and quality in DevSecOps and throughout the software development life cycle.

Black Duck Software, Inc. helps organizations build secure, high-quality software, minimizing risks while maximizing speed and productivity. Black Duck, a recognized pioneer in application security, provides SAST, SCA, and DAST solutions that enable teams to quickly find and fix vulnerabilities and defects in proprietary code, open source components, and application behavior. With a combination of industry-leading tools, services, and expertise, only Black Duck helps organizations maximize security and quality in DevSecOps and throughout the software development life cycle.

This Sr. Staff Engineer role will work on advancing the Software Risk Management (SRM) platform which integrates all your application security (AppSec) test results into a centralized location and automates the most time-intensive tasks to speed up testing and remediation.

The ideal candidate will have knowledge of Scala, JavaScript, and Java to help us create web-based tools that aids developers in writing better, more-secure software. You will play an effective role in the full application development lifecycle. You will work with customers to understand their needs, maintain the latest tools and techniques for software security, shape projects, define tasks, and build solutions. This is a hands-on role for a person with solid analytical and communication skills, and a keen focus on helping our users write better code.

We take deep pride in our products that are helping our customers to improve software quality and security. We offer an open culture, relaxed working environment, and flexible hours with like-minded people in an enthusiastic team.

The ideal candidate is an innovative thinker with a proven track record of delivering complex, cross development teams solutions. A hands-on technology enthusiast, and a solid full-stack engineer, they also enjoy helping their peers and their organization remain at the forefront of our industry by identifying and helping implement the latest industry best-practices that boost our organization’s productivity and team members’ experience. 

Key Responsibilities: 

• Work on architecture, design, and product definition that drives influential decisions and outcomes related to project direction
• Has a team-player mentality - can communicate effectively with all team members
• Attracted to learning new technologies and expanding existing software to meet the changing needs of our key demographics
• Able to communicate complex material to technical and non-technical audiences
• Develop high quality, deliverable software with little management intervention or oversight

Key Qualifications: 

• 8+ years of experience in software development building enterprise-grade customer facing products
• Proven experience working on web-based applications across the full development stack
• Proficiency with Scala (including Cats and/or Shapeless, Monix, sbt), Java, JavaScript/React, HTML/CSS, REST, and SQL
• Experience with using a RDBMS (MariaDB/MySQL preferred) for storing and queuing large sets of data
• Experience with Git, GitOps, Jira, and Confluence or equivalent tools
• Stellar written and oral communication skills
• Customer-first and results-oriented mindset and the ability to make practical decisions when making engineering choices
• BS/MS in Computer Science/Software Engineering or related discipline

Nice-to-Have:

• Automated testing with Selenium
• Experience working with application security testing tools
• Experience with Kubernetes, Docker, or Go