Software Engineer 2
Black Duck Software, Inc.Responsibilities
- Develop and maintain security checkers that detect vulnerabilities at runtime.
- Build monkey-patching probes for Python libraries and frameworks.
- Extend AST transformation logic to track data flow through application code.
- Ensure compatibility across Python 3.8 through 3.14 and major web frameworks.
- Write integration tests against sample Django, Flask, and FastAPI applications.
- Debug complex instrumentation issues in customer environments.
- Maintain a zero-runtime-dependency architecture by vendoring third-party code.
- Collaborate on architecture decisions for new detection capabilities.
Requirements
- At least 3 years of professional Python development experience is required.
- Strong understanding of Python internals, including the AST module, import system, metaclasses, and descriptors.
- Experience with at least two of Django, Flask, and FastAPI.
- Familiarity with common web security vulnerabilities, including the OWASP Top 10, SQL injection, cross-site scripting, and command injection.
- Experience writing and maintaining unit and integration tests with pytest.
- Comfort with Docker-based development and testing workflows.
- Understanding of asynchronous Python, including asyncio and context variables.
- Experience with bytecode or AST transformation or monkey patching, such as wrapt, is preferred.
- Knowledge of data-flow analysis or taint-tracking techniques is preferred.
- Experience supporting multiple Python versions, including Python 3.8 through 3.14, is preferred.
- Familiarity with WebSocket protocols and real-time communication is preferred.
- Experience with zero-dependency library design and vendoring approaches is preferred.
- AWS Lambda or Kubernetes experience is preferred.
- Contributions to security tooling or SAST, DAST, or IAST products are preferred.
Tech Stack
About Black Duck Software, Inc.
Black Duck® meets the board-level risks of modern software with True Scale Application Security, ensuring uncompromised trust in software for the regulated, AI-powered world. Only Black Duck solutions free organizations from tradeoffs between speed, accuracy, and compliance at scale while eliminating security, regulatory, and licensing risks. Whether in the cloud or on premises, Black Duck is the only choice for securing mission-critical software everywhere code happens. With Black Duck, security leaders can make smarter decisions and unleash business innovation with confidence. Learn more at www.blackduck.com. Disclaimer: Please watch out for hiring fraud. Black Duck will never make initial contact with candidates through text or WhatsApp. Emails will come from an @blackduck.com address. You can verify openings and apply for roles through the Black Duck Careers page (https://www.blackduck.com/company/careers.html)