Application Security Engineer (Remote, Worldwide)

Ever dreamt of a role where your technical prowess directly shapes the security of countless software applications, all while working with cutting-edge tools from anywhere in the world? Black Duck Software, a recognized leader in application security, is searching for a passionate Application Security Engineer. We are pioneering solutions that empower organizations to build secure, high-quality software, moving fast without compromising safety. If you're an experienced technologist eager to make a significant impact on customer success and thrive in a fast-paced environment, this fully remote opportunity, ideally aligning with West Coast business hours, could be your next big adventure. Come join our dynamic team and help us redefine what's possible in DevSecOps!

Overview

Black Duck Software, Inc. stands at the forefront of application security, helping organizations create secure, high-quality software while maximizing speed and productivity. As a pioneer in the field, we deliver comprehensive SAST, SCA, and DAST solutions. These powerful tools enable development teams to quickly identify and remediate vulnerabilities and defects across proprietary code, open source components, and application behavior. With our industry-leading tools, expert services, and deep knowledge, Black Duck uniquely empowers organizations to enhance security and quality throughout the entire software development lifecycle and within DevSecOps practices.

We're consistently recognized in Gartner's Magic Quadrant for application security, a testament to our innovation and market leadership. Our Implementation and Services Team is crucial for driving customer onboarding and adoption, ensuring our clients achieve maximum value from our solutions. This role is a vital part of that mission, elevating our delivery excellence and customer delight for our global customer base.

Key Responsibilities

Guide customers through the successful implementation and integration of Black Duck's SAST, SCA, and DAST solutions.
Provide expert technical assistance and share best practices for embedding security tools seamlessly into CI/CD pipelines.
Conduct thorough security assessments and vulnerability analysis in collaboration with customer teams, helping them understand and prioritize findings.
Deliver comprehensive training sessions to customer teams, ensuring they can effectively utilize Black Duck products to their full potential.
Troubleshoot complex technical challenges related to application security tools and their integration into diverse customer environments.
Collaborate closely with our product and engineering teams, relaying valuable customer feedback to inform future product enhancements and innovations.
Contribute to the creation of detailed documentation and knowledge base articles, empowering customers with self-service resources.
Stay continuously informed about the latest application security trends, threats, and mitigation strategies to maintain our cutting-edge expertise.

Requirements

Demonstrable experience working with SAST, SCA, and DAST solutions in a professional capacity.
A strong understanding of the Software Development Lifecycle (SDLC) and modern DevSecOps practices.
Proficiency in at least one major programming language, such as Java, .NET, Python, or JavaScript.
Practical experience with popular CI/CD tools like Jenkins, GitLab CI, Azure DevOps, or similar platforms.
Solid familiarity with common application security vulnerabilities, including the OWASP Top 10.
Exceptional problem-solving abilities and clear, concise communication skills, both written and verbal.
The capacity to work effectively both independently and as a valued member of a distributed, global team.
Prior experience in a customer-facing technical role or professional services environment is a significant advantage.

What You'll Gain

The opportunity to work with and influence cutting-edge application security technologies at a market-leading company.
A role within an organization consistently recognized in Gartner's Magic Quadrant for application security.
Directly impact customer success, shaping their security posture, and contribute to the evolution of our products.
Engage in continuous learning and professional growth within a rapidly expanding and critical cybersecurity market.
Thrive in a supportive, collaborative, and fully remote work environment.
Receive a competitive compensation and benefits package reflecting your expertise and contributions.