Software Engineer 4 (C#,. Net core, Runtime Profiling, CLR Internals)
Black Duck Software, Inc.Responsibilities
- Design, develop, and maintain the .NET agent core, including security checkers for SQL injection, XSS, CSRF, deserialization, and other vulnerabilities.
- Develop and optimize native C++ profilers using the CLR Profiling API for .NET Framework and .NET Core/.NET 5+.
- Support multi-platform builds for Windows x64, Linux x64 and ARM64, and Alpine/musl environments.
- Extend agent support to .NET 8, .NET 9, .NET 10+, and hosting models including AWS Lambda, Azure Functions, gRPC, OWIN, and WCF.
- Collaborate on GitLab CI pipelines across multiple operating systems and Docker-based build environments.
- Write and maintain NUnit unit tests and integration tests across framework versions.
- Troubleshoot low-level runtime issues involving IL rewriting, method interception, and memory management.
- Participate in code reviews and architecture discussions and improve build systems.
Requirements
- At least 9 years of professional software development experience.
- Strong C# proficiency across .NET Framework 3.5–4.8.1 and .NET Core/.NET 5+ through .NET 10.
- C++ experience with native interop, COM, and platform APIs; CLR Profiling API experience is preferred.
- Deep knowledge of .NET CLR internals, including assembly loading, JIT compilation, IL metadata, and the type system.
- Experience with multi-platform development across Windows and Linux.
- Proficiency with CMake, MSBuild, and complex build orchestration.
- Strong debugging skills across managed and native boundaries.
- Experience with Git and CI/CD pipelines, preferably GitLab CI.
- Preferred experience in application security, DAST, IAST, security instrumentation, profilers, APM agents, runtime instrumentation, reverse engineering, or binary analysis.
- Preferred knowledge of OWASP Top 10 vulnerabilities, Docker containerization and multi-architecture builds, serverless platforms, WiX installer authoring, NuGet packaging, code obfuscation, logging frameworks, WebSocket protocols, and ReSharper code inspection tooling.
Benefits
- Hybrid work mode with 3 days working from the office.
- Job location is Black Duck Bangalore, Prestige Blue Chip, near Dairy Circle and opposite Christ University.
- Black Duck is an equal opportunity employer and provides reasonable accommodations for individuals with disabilities.
About Black Duck Software, Inc.
Black Duck® meets the board-level risks of modern software with True Scale Application Security, ensuring uncompromised trust in software for the regulated, AI-powered world. Only Black Duck solutions free organizations from tradeoffs between speed, accuracy, and compliance at scale while eliminating security, regulatory, and licensing risks. Whether in the cloud or on premises, Black Duck is the only choice for securing mission-critical software everywhere code happens. With Black Duck, security leaders can make smarter decisions and unleash business innovation with confidence. Learn more at www.blackduck.com. Disclaimer: Please watch out for hiring fraud. Black Duck will never make initial contact with candidates through text or WhatsApp. Emails will come from an @blackduck.com address. You can verify openings and apply for roles through the Black Duck Careers page (https://www.blackduck.com/company/careers.html)