Software Engineer 4 (C#,. Net core, Runtime Profiling, CLR Internals)
Black Duck Software, Inc.2 months ago
Bengaluru, IndiaStaff+
Responsibilities
- Design, develop, and maintain the .NET agent core, including security checkers for SQL injection, XSS, CSRF, deserialization, and other vulnerabilities.
- Develop and optimize native C++ profilers using the CLR Profiling API for .NET Framework and .NET Core/.NET 5+.
- Support multi-platform builds for Windows x64, Linux x64 and ARM64, and Alpine/musl environments.
- Extend agent support to .NET 8, .NET 9, .NET 10+, and hosting models including AWS Lambda, Azure Functions, gRPC, OWIN, and WCF.
- Collaborate on GitLab CI pipelines across multiple operating systems and Docker-based build environments.
- Write and maintain NUnit unit tests and integration tests across framework versions.
- Troubleshoot low-level runtime issues involving IL rewriting, method interception, and memory management.
- Participate in code reviews and architecture discussions and improve build systems.
Requirements
- At least 9 years of professional software development experience.
- Strong C# proficiency across .NET Framework 3.5–4.8.1 and .NET Core/.NET 5+ through .NET 10.
- C++ experience with native interop, COM, and platform APIs; CLR Profiling API experience is preferred.
- Deep knowledge of .NET CLR internals, including assembly loading, JIT compilation, IL metadata, and the type system.
- Experience with multi-platform development across Windows and Linux.
- Proficiency with CMake, MSBuild, and complex build orchestration.
- Strong debugging skills across managed and native boundaries.
- Experience with Git and CI/CD pipelines, preferably GitLab CI.
- Preferred experience in application security, DAST, IAST, security instrumentation, profilers, APM agents, runtime instrumentation, reverse engineering, or binary analysis.
- Preferred knowledge of OWASP Top 10 vulnerabilities, Docker containerization and multi-architecture builds, serverless platforms, WiX installer authoring, NuGet packaging, code obfuscation, logging frameworks, WebSocket protocols, and ReSharper code inspection tooling.
Benefits
- Hybrid work mode with 3 days working from the office.
- Job location is Black Duck Bangalore, Prestige Blue Chip, near Dairy Circle and opposite Christ University.
- Black Duck is an equal opportunity employer and provides reasonable accommodations for individuals with disabilities.
About Black Duck Software, Inc.
Black Duck Software builds application security tools and services for engineering and security teams, including SAST, SCA, and DAST to find vulnerabilities and licensing/compliance risks in proprietary and open-source code. It offers enterprise software plus on-demand audits and M&A due diligence, delivered in the cloud or on premises. The company is privately held and headquartered in Burlington, Massachusetts.