Your browser does not support javascript! Please enable it, otherwise web will not work for you.

Application Security Engineer 2

Home > Java programming jobs

Application Security Engineer 2 in Others new

  • Black Duck Software, Inc.
  • Full time
  • Email
  • Bengaluru, India

Responsibilities

  • Develop comprehensive application security program roadmaps, maturity assessments, and framework-aligned reports.
  • Create visuals and documentation for capability maturity models and strategic planning.
  • Prepare executive summaries and strategic recommendations for leadership audiences.
  • Identify, track, and support remediation of vulnerabilities in third-party open-source components.
  • Conduct client-facing presentations and facilitate discussions that translate technical findings into actionable plans.

Requirements

  • 2–4 years of experience in application security, software assurance, or product security consulting.
  • Strong knowledge of BSIMM, NIST SSDF, or OWASP SAMM frameworks.
  • Experience with open-source software security, Software Bill of Materials standards and tools, and software supply chain transparency.
  • Experience developing or executing maturity models, capability assessments, or multi-year AppSec or DevSecOps roadmaps.
  • Hands-on experience with secure software development practices, SDLC, CI/CD pipelines, and code-level security controls.
  • Excellent verbal and written communication, presentation, and facilitation skills in client-facing environments.
  • Preferred: consulting experience with a Big Four firm, boutique AppSec consultancy, or internal software security governance team.
  • Preferred: experience in software supply chain risk management, AI/ML assurance, or DevSecOps pipeline design.
  • Preferred: software development background with Java, Python, or C# and experience working within secure SDLCs.
  • Preferred: CEH, CISSP, CSSLP, CISM, or equivalent certification.

Black Duck Software, Inc.

Black Duck Software builds application security tools and services for engineering and security teams, including SAST, SCA, and DAST to find vulnerabilities and licensing/compliance risks in proprietary and open-source code. It offers enterprise software plus on-demand audits and M&A due diligenc...

Similar positions

Distributed Systems Engineer - Data Platform

  • Netflix
  • Full time
  • USA
  • 09/16/2026
  • Salary: $388k-$619k
  • Remote

Software Engineering Internship

  • BEUMER Group
  • Full time
  • Others
  • 09/16/2026
  • Aarhus, Denmark

Principal Software Engineer

  • Okta
  • Full time
  • Others
  • 09/16/2026
  • Bengaluru, India

Software Engineer

  • Snowflake
  • Full time
  • Others
  • 09/16/2026
  • Pune, India

Senior Software Engineer

  • Yext
  • Full time
  • USA
  • 09/16/2026
  • Salary: $149k - $304k/yr
  • Washington, DC