about 1 month ago
Bengaluru, IndiaMid Level / Senior
H1B Sponsor

Responsibilities

  • Develop and maintain security checkers that detect vulnerabilities at runtime.
  • Build monkey-patching probes for Python libraries and frameworks.
  • Extend AST transformation logic to track data flow through application code.
  • Ensure compatibility across Python 3.8-3.14 and major web frameworks.
  • Write integration tests against sample applications (Django, Flask, FastAPI).
  • Debug complex instrumentation issues in customer environments.
  • Maintain zero-runtime-dependency architecture (vendor all third-party code).
  • Collaborate on architecture decisions for new detection capabilities.

Requirements

  • 3+ years of professional Python development experience.
  • Strong understanding of Python internals (AST module, import system, metaclasses, descriptors).
  • Experience with at least two of: Django, Flask, FastAPI.
  • Familiarity with common web security vulnerabilities (OWASP Top 10: SQLi, XSS, command injection, etc.).
  • Experience writing and maintaining unit/integration tests with pytest.
  • Comfortable with Docker-based development and testing workflows.
  • Understanding of async Python (asyncio, context variables).

Tech Stack

DjangoDockerFastAPIFlaskKubernetespytestPython
Black Duck Software, Inc.

About Black Duck Software, Inc.

5,001-10,000 employees

Black Duck® meets the board-level risks of modern software with True Scale Application Security, ensuring uncompromised trust in software for the regulated, AI-powered world. Only Black Duck solutions free organizations from tradeoffs between speed, accuracy, and compliance at scale while eliminating security, regulatory, and licensing risks. Whether in the cloud or on premises, Black Duck is the only choice for securing mission-critical software everywhere code happens. With Black Duck, security leaders can make smarter decisions and unleash business innovation with confidence. Learn more at www.blackduck.com. Disclaimer: Please watch out for hiring fraud. Black Duck will never make initial contact with candidates through text or WhatsApp. Emails will come from an @blackduck.com address. You can verify openings and apply for roles through the Black Duck Careers page (https://www.blackduck.com/company/careers.html)