BD

Black Duck

Verified Job Source

True Scale Application Security — Uncompromised trust in software for the regulated, AI-powered world

Burlington, MA

Software Development
1,001–5,000 people

About

Black Duck® meets the board-level risks of modern software with True Scale Application Security, ensuring uncompromised trust in software for the regulated, AI-powered world. Only Black Duck solutions free organizations from tradeoffs between speed, accuracy, and compliance at scale while eliminating security, regulatory, and licensing risks. Whether in the cloud or on premises, Black Duck is the only choice for securing mission-critical software everywhere code happens. With Black Duck, security leaders can make smarter decisions and unleash business innovation with confidence. Learn more at www.blackduck.com. Disclaimer: Please watch out for hiring fraud. Black Duck will never make initial contact with candidates through text or WhatsApp. Emails will come from an @blackduck.com address. You can verify openings and apply for roles through the Black Duck Careers page (https://www.blackduck.com/company/careers.html)

Open positions

Principal Software Engineer (IAM)

On-site · Calgary

Lead the architecture, design, and evolution of enterprise-scale identity and access management solutions. Drive engineering excellence through technical leadership, mentoring, and the implementation of secure, scalable SaaS platforms.

Principal Software Engineer (IAM)

On-site · Calgary

Lead the architecture, design, and implementation of enterprise-scale identity and access management solutions across the organization. Provide technical leadership to cross-functional teams while driving engineering excellence and operational efficiency for secure SaaS platforms.

Sr Director, Technology Partner Alliances Development

Remote · Canada

Establish and scale Black Duck's technology partnership ecosystem by defining alliance strategies and building transformative relationships. Drive integration-led growth and manage the full partnership lifecycle from identification through commercialization and scale.

Server Engineer

On-site · Calgary

The Server Engineer supports the implementation, maintenance, and operation of global IT infrastructure platforms, including physical servers, virtualization, and cloud services. Responsibilities include managing lifecycle activities, monitoring performance, and participating in a rotating on-call schedule for critical operations.

Server Engineer

On-site · Calgary

The Server Engineer supports the implementation, maintenance, and operation of global IT infrastructure platforms including servers, virtualization, and storage. They also participate in migrations, upgrades, and deployments while providing technical support to team members and stakeholders.

Principal Software Engineer (Agentic Integration)

On-site · Calgary

The Principal Software Engineer will architect and implement agentic workflows that integrate Black Duck's security products directly into developer environments. This role involves designing multi-agent orchestration systems and identifying new opportunities to enhance developer productivity through AI-driven tooling.

Regional Field CTO

Remote · Canada

Serve as a senior technical executive and trusted advisor to C-level stakeholders at strategic accounts to drive technology strategy. Act as a technical evangelist by delivering thought leadership content and translating AI-driven platform capabilities into credible narratives.

Lead Product Security

Remote · Canada

The Lead Incident Security Responder drives applied product security across the portfolio, performing architecture reviews, threat models, and vulnerability triage. They also manage customer security inquiries and maintain detection content and SOAR automations within the corporate environment.

Application Security Engineer (West Coast)

Hybrid · Calgary

Implement application security products for large enterprise customers on the West Coast to drive onboarding and adoption. Act as a trusted advisor by designing solutions, educating customers on secure development, and developing custom SDLC integrations.

Principal Software Engineer (Agentic Integration)

On-site · Calgary

Architect and implement agentic workflows and MCP-based integrations to connect Black Duck's security products into developer tools. Lead the technical direction of the MCP Gateway and mentor engineers on modern agentic system design.

Software Engineer 3 (C++/Rust)

On-site · Calgary

Design and develop scalable static analysis solutions while enhancing core infrastructure for performance and reliability. Integrate static analysis into AI-driven development workflows to enable automated security insights and vulnerability remediation.

Pricing Strategist & Market Intelligence Manager

Remote · Canada, United States

Own the list pricing architecture, packaging strategy, and competitive intelligence to ensure products are margin-accretive and aligned with customer buying patterns. Translate market signals and customer segmentation analysis into actionable go-to-market recommendations for senior leadership.

Principal Technical Account Manager

On-site

Black Duck Software, Inc. helps organizations build secure, high-quality software, minimizing risks while maximizing speed and productivity. Black Duck, a recognized pioneer in application security, provides SAST, SCA, and DAST solutions that enable teams to quickly find and fix vulnerabilities and defects in proprietary code, open source components, and application behavior. With a combination of industry-leading tools, services, and expertise, only Black Duck helps organizations maximize security and quality in DevSecOps and throughout the software development life cycle. Black Duck, the 20…

Application Security Engineer (West Coast)

Remote · United States, Canada

The position involves implementing application security products and solutions for large enterprise customers on the West Coast. Responsibilities include educating customers on secure development processes, providing formal training, and delivering end-to-end project ownership.