Software Engineering, Sr Engineer
Black Duck
Black Duck Software, Inc. helps organizations build secure, high-quality software, minimizing risks while maximizing speed and productivity. Black Duck, a recognized pioneer in application security, provides SAST, SCA, and DAST solutions that enable teams to quickly find and fix vulnerabilities and defects in proprietary code, open source components, and application behavior. With a combination of industry-leading tools, services, and expertise, only Black Duck helps organizations maximize security and quality in DevSecOps and throughout the software development life cycle.
We are looking for an exceptional developer, with experience or interest in building and deploying security tools, to join the Coverity team. The job involves evolving Coverity's state of the art analysis infrastructure and generally pushing the envelope of static analysis. In particular, the job will include enhancing the analysis product for scalable and performant deployment. In this role the developer will be implementing, testing, and evaluating security checks (or rules) using the latest Checker API technology and Rust programming language. The checks specify the types of the defects our static analysis tool reports. Thus, adding more checks will provide users with better security results when scanning their code. You will create checks for variety of languages supported.
Key Responsibilities:
As part of the team, you will be involved in one or more of the following activities,
- Design and develop code analysis checkers for various languages.
- Improve existing and develop new code analysis techniques and algorithms.
- Create test cases for validating different execution scenarios.
- Perform evaluations of check results using Jenkins automation
- Contribute to the collection of benchmarks used for check evaluation.
Key Qualifications:
- Bachelor's or master’s in computer engineering or related fields
- 2+ yrs of experience in static analysis and related technologies
- Experience with data structures and algorithmic design and analysis with development on Linux/Unix or Windows
- Demonstrated history of good analytical, debugging, and problem-solving skills and Programming experience in RUST and/or C++
- Interest or experience in analyzing programming languages, building compilers, parsers, or other language analyzers, dataflow and program analysis.
- Interest or experience with web application or mobile security, familiarity with OWASP Top 10 lists.
- Good written and oral communication skills, for team collaboration and product presentations.
Black Duck considers all applicants for employment without regard to race, color, religion, sex, gender preference, national origin, age, disability, or status as a Covered Veteran in accordance with federal law. In addition, Black Duck complies with applicable state and local laws prohibiting discrimination in employment in every jurisdiction in which it maintains facilities. Black Duck also provides reasonable accommodation to individuals with a disability in accordance with applicable laws.