Software Engineer 3(C++) at Black Duck

<div class="content-intro"><p>Black Duck Software, Inc. helps organizations build secure, high-quality software, minimizing risks while maximizing speed and productivity. Black Duck, a recognized pioneer in application security, provides SAST, SCA, and DAST solutions that enable teams to quickly find and fix vulnerabilities and defects in proprietary code, open source components, and application behavior. With a combination of industry-leading tools, services, and expertise, only Black Duck helps organizations maximize security and quality in DevSecOps and throughout the software development life cycle.</p></div><p data-ccp-timestamp="1775106944107">&nbsp;</p> <table style="width: 1391px; height: 468px;" width="349"> <tbody> <tr> <td style="width: 1376.2px;"> <h2><strong>Role Overview</strong></h2> <p>As part of our engineering team, you will work on code analysis technologies and contribute to building high‑quality static analysis solutions. This role offers the opportunity to work across multiple programming languages, improve existing analyses, and help define benchmarks and validation processes.</p> <h2><strong>Primary Responsibilities</strong></h2> <ul> <li>Design and develop static code analysis for <strong>C, C++, and Java</strong>.</li> <li>Enhance existing analysis checkers and implement new ones to improve coverage and accuracy.</li> <li>Develop comprehensive test cases to validate multiple execution scenarios.</li> <li>Perform automated evaluation of analysis results using <strong>Jenkins</strong> and other CI tools.</li> <li>Contribute to building and maintaining benchmark suites used for checker evaluation and comparison.</li> </ul> <h2><strong>Qualifications and Experience</strong></h2> <ul> <li>Bachelor’s or Master’s degree in <strong>Computer Engineering, Computer Science</strong>, or a related field.</li> <li>Hands-on experience with <strong>static analysis, compilers, or related technologies</strong>.</li> <li>Strong object-oriented programming skills with <strong>C/C++</strong> (6+ years) on <strong>Linux/Unix</strong> platforms.</li> </ul> <h2><strong>Preferred Qualifications</strong></h2> <ul> <li>Familiarity with compliance and secure coding standards such as <strong>MISRA</strong> and <strong>CERT</strong>.</li> <li>Interest or experience in one or more of the following areas: <ul> <li>Programming language analysis, compiler construction, parsers, or language analyzers</li> <li>Dataflow analysis and program analysis techniques</li> <li>Web or mobile application security, including familiarity with the <strong>OWASP Top 10</strong></li> </ul> </li> <li>Proven analytical, debugging, and problem-solving skills.</li> <li>Ability to work effectively both <strong>independently and in cross-functional teams</strong>.</li> <li>Strong written and verbal communication skills for technical discussions, collaboration, and product presentations.</li> </ul> </td> </tr> </tbody> </table><div class="content-conclusion"><p><em>Black Duck is an equal opportunity employer. We consider all applicants for employment without regard to race, color, national origin, religion, sex, gender identity or expression, age, disability, sexual orientation, veteran or military service status, or any other characteristic protected by applicable law. Black Duck complies with all applicable laws prohibiting employment discrimination in every jurisdiction where it operates and provides reasonable accommodations to individuals with disabilities in accordance with applicable law.</em></p></div>