Application Security Engineer III

We’re seeking a Senior Application Security Consultant with deep expertise in software security, secure development practices, governance, and framework-driven transformation planning. In this role, you will lead client engagements to assess Application Security Programs (AppSec) against industry frameworks and deliver strategic roadmaps that help organizations build, scale, and measure their secure software development capabilities. This position blends strategic consulting, technical governance, and development lifecycle expertise to translate assessment findings into actionable, measurable programs aligned with frameworks such as BSIMM and NIST SSDF.

Key Responsibilities

• Lead AppSec Program maturity assessments using frameworks like BSIMM, NIST SSDF, and OWASP SAMM, including stakeholder interviews, evidence collection, and scoring.
• Design and deliver Strategic Roadmaps outlining target states, 12–36-month plans, resource needs, and success metrics.
• Facilitate workshops with executive, engineering, and AppSec leadership to align initiatives with organizational risk and compliance goals.
• Deliver compelling, executive-level presentations and recommendations to CISOs, CTOs, and software leadership teams.
• Contribute to internal tools and accelerators (e.g., maturity scoring tools, roadmap templates, reporting dashboards).
• Support thought leadership through whitepapers, webinars, and conference presentations on secure software development and governance.

Qualifications

Must to have:

• 5 – 8 years of experience in application security, software assurance, or product security consulting.
• Strong knowledge of frameworks such as BSIMM, NIST SSDF, or OWASP SAMM.
• Experience with Open-Source Software (OSS) security, including identification, tracking, and remediation of vulnerabilities in third-party components.
• Familiarity with Software Bill of Materials (SBOM) standards and tools (e.g., SPDX, CycloneDX), and their role in software supply chain transparency and compliance
• Proven experience in developing or executing maturity models, capability assessments, or multi-year roadmaps for AppSec or DevSecOps programs.
• Hands-on experience with secure software development practices, including familiarity with SDLC, CI/CD pipelines, and code-level security controls.
• Excellent verbal and written communication skills, with the ability to translate technical findings into clear, executive-level narratives and actionable plans.
• Strong presentation and facilitation skills in client-facing environments.

Nice to have:

• Prior consulting experience with a Big Four, boutique AppSec consultancy, or internal software security governance team.
• Experience in software supply chain risk management (SSCRM), AI/ML assurance, or DevSecOps pipeline design.
• Background in software development (e.g., Java, Python, C#) and experience working within secure SDLCs.
• Industry certifications such as CEH, CISSP, CISM, or equivalent.

What You’ll Deliver

• Comprehensive AppSec Program Roadmaps, maturity assessments, and framework-aligned reports.
• Visuals and documentation for capability maturity models and strategic planning.
• Executive summaries and strategic recommendations tailored to leadership audiences.

We are seeking a Digital Experience Specialist to support and scale our Digital Experience (DX) program by owning the execution of customer-facing digital communications, lifecycle automation, documentation, and performance tracking.

Why You’ll Love This Role

As a Digital Experience Specialist, you will work closely with the Digital Experience, Customer Community, and Education teams to execute and operationalize scalable digital engagement programs. You will focus on hands-on delivery—building campaigns, managing automation, and maintaining program materials—to ensure consistent, high-quality customer experiences.

This role is ideal for someone who enjoys execution-oriented work, operational ownership, and building repeatable systems that improve customer experience and program scalability.

What You’ll Do

Digital Communications & Automation

• Source and design content and messaging used for customer-facing digital communications
• Build, QA, launch, and maintain automated customer lifecycle and engagement workflows
• Configure audience segmentation, logic, and scheduling based on established strategy
• Manage the DX communications calendar to ensure coordinated and timely delivery
• Intake and triage ad-hoc communication requests in partnership with the DX PM
• Conduct ongoing QA of automat workflows and support incremental improvements
  
  

Reporting, Documentation & Program Operations

• Pull, prepare, and validate data related to email performance and customer engagement
• Maintain dashboards and recurring performance reporting (e.g., open rates, click-through rates)
• Prepare summaries and visuals to support program insights and visibility
• Maintain DX documentation and internal resource sites to ensure accuracy and usability
• Update guidance materials and operational documentation as the program evolves
  
  

What We’re Looking For

• 2 – 5+ years of experience in digital programs, customer lifecycle operations, or marketing operations
• Hands-on experience with email automation or customer engagement platforms
• Strong organizational skills with the ability to manage multiple workstreams
• High attention to detail, particularly in QA and workflow accuracy
• Experience preparing data, metrics, or dashboards
• Strong written communication skills
• Ability to work independently and collaboratively in a cross-functional environment
• Ability to accommodate flexible working hours, including aligning up to 3 days a week in the office during the night shift (7 PM - 3 AM IST) to overlap with colleagues in the US.

Bonus If You Have

• Experience with ChurnZero or similar customer engagement platforms
• Familiarity with Salesforce or CRM systems
• Experience with Microsoft 365 and SharePoint
• Understanding of lifecycle engagement and automation best practices
• Fluency in Japanese

Are you interested in joining a fast-growing organization in the application security space, which is in the top spot of Gartner's Magic Quadrant for application security? Are you a technologist who wants to make a massive impact on Customers and help them develop high-quality, secure software faster? We want to speak to you! 
 
Black Duck seeks an experienced Technologist to help our Implementation and Services Team drive customer onboarding and adoption. We're looking for someone to help us take our business to the next level of excellence in delivery and customer delight! 
 
The Team 
 
The Black Duck Technical Services team is dedicated to supporting our customers in developing their AppSec vision and achieving their goals quickly. We accomplish this through the delivery of exemplary product implementations and adoption-focused services that are tailored to their specific needs. Our services are designed to help customers of all sizes and types, from Startup’s to global organizations, build secure, high-quality software faster and maximize the value of their Black Duck tools. 
 
A Day in Your Life 
 
In this role, you'll be responsible for the planning and successful implementation of Black Duck’s solutions to help the world's leading technology companies meet their software security, quality, and compliance goals.  
 
Solution design: You'll engage with customers to understand their business needs and solve critical problems concerning quality, security, and compliance. 
Delivery: You'll work with the customer from Project initiation to completion with end-to-end ownership of the results. 
Custom integrations: You'll develop custom solutions to integrate our tools into SDLC and DevOps workflows. 
Expert consulting: You'll be a trusted advisor to our customers, providing solution expertise in software testing and security.  
Sales visibility: You'll work with our account teams throughout delivery to ensure the account team has a view of the success of the engagement. 
Account growth: You will work closely with existing clients to identify opportunities to further adopt our solutions. 
Secure Development: You'll advise customers on Secure Development processes. Identifying opportunities for improvement and helping them get the most out of their operations. 
 
About You 

You'll have: 

• Knowledge of application security and vulnerabilities.
• Software development experience with C/C++, Java, C#, or another dominant programming language.
• Strong scripting ability in one or more common scripting languages (Perl, Python, PowerShell, Bash).
• Experience with Continuous Integration and DevOps tools.  
• A demonstrated technical aptitude, sharp consulting instincts, and a passion for delivering ground-breaking solutions for top-tier technology companies.
• Rock-solid analytical skills, conceptual ability, and creativity.
• The talent to work with, connect to, and influence customers to transform processes to utilize new technologies.
• The ability to travel up as the job requires. 
   
  You May Have:
• A track record of delivering professional services and technical account management for complex security products.
• Security certification such as CEH, CISSP, or CSSLP.
• Proven ability to deploy both SaaS and On-prem solutions.  
• Experience with security testing and network protocols. 
   
   Your Education: 
   
• Bachelor’s degree in computer science, engineering, or another scientific degree (Master's Degree or equivalent Experience preferred). 

Are you an energetic and customer-focused Project or Program Manager? Are you action-oriented and proactive by nature? Can you quickly decompose complex concepts and explain them in a way that makes sense to technical and non-technical audiences? If so, we want to speak to you!  

Black Duck, a repeated leader in the Gartner Magic Quadrant for Application Security, is seeking an experienced Project / Engagement Manager to help our Implementation and Services Team drive customer onboarding and adoption. We’re looking for someone to help take our business to the next level of excellence in delivery and customer delight!

About the team: 
The Black Duck Technical Services team is dedicated to supporting our customers in developing their AppSec vision and achieving their goals quickly. We accomplish this through the delivery of exemplary product implementations and adoption-focused services that are tailored to their specific needs. Our services are designed to help customers of all sizes and types, from Startup’s to global organizations, build secure, high-quality software faster and maximize the value of their Black Duck tools. 

A Day in Your Life  

In this role, you'll be responsible for the planning and successful implementation of Black Duck solutions to help the world’s leading technology companies meet their software security goals.  

• Project Management: You’ll serve as project lead and own all functional aspects of the engagement. This includes requirements gathering and translating the scope of work into a project plan containing milestones, deliverables, dependencies, critical path, and RACI. 
• Delivery: You’ll coordinate people (vertical, horizontally) and processes to ensure projects are delivered on-time, on-track, and within budget to consistently produce high quality outcomes. 
• Communication: You’ll establish and maintain relationships at all levels of the customer organization including project team members, executive sponsors and key stakeholders. 
• Status Reporting: You’ll develop status reports and communicate clear, accurate, and timely updates regarding project health and progress 
• Risk Management: You’ll diagnose implementation challenges/risks, develop contingency plans, and implement changes to drive risk mitigation. 
• Cross-Functional Collaboration: You’ll lead cross-functional teams (collocated and remote) to ensure stakeholders (Sales, TAMs, CSMs, Tech Support, SEs, etc.) are aligned and informed.  
• Accountability: You’ll set clear expectations with internal and external team members and hold them accountable for deadlines and project deliverables. 
• Process Improvement: You’ll document lessons learned and recommend process and methodology improvements to improve execution on future projects. 

About You  

You’ll have:  

• At least 5 years of experience in a client-facing professional services, consulting, or project management role. 
• Proven ability to lead 5-10 person implementation teams to deliver multi-workstream projects.
• Proactive, thorough, and transparent in communication - people rarely need to follow up with you.
• Process driven and have a strong desire to create, implement, and iterate on processes that lead to a standardized and positive customer experience. 
• Exceptional EQ, critical thinking and problem-solving skills 
• Experience working in a global environment and supporting customers in different time-zones.
• Experience with mixed onshore/offshore delivery models. 
• Proven ability to lead projects for both SaaS and On-prem solutions.  
• Willingness to work flexible hours to support North America and EMEA customer engagements. 

You May Have:  

• A track record of managing onboarding / adoption focused professional services and customer success engagements for complex products. 
• Familiarity with the DevOps and Application Security space
• PMP, PRINCE2 Foundation/PRINCE2 Practitioner, or other project management certification. 
• Experience with PSA and Project Management tools, preferably with one or more of the following: Salesforce, TeamWork, Certinia, Confluence, Jira 

 Your Education:  

• A bachelors or masters degree