Black Duck Software, Inc. helps organizations build secure, high-quality software, minimizing risks while maximizing speed and productivity. Black Duck, a recognized pioneer in application security, provides SAST, SCA, and DAST solutions that enable teams to quickly find and fix vulnerabilities and defects in proprietary code, open source components, and application behavior. With a combination of industry-leading tools, services, and expertise, only Black Duck helps organizations maximize security and quality in DevSecOps and throughout the software development life cycle.
Black Duck Software, Inc. helps organizations build secure, high-quality software, minimizing risks while maximizing speed and productivity. Black Duck, a recognized pioneer in application security, provides SAST, SCA, and DAST solutions that enable teams to quickly find and fix vulnerabilities and defects in proprietary code, open-source components, and application behavior. With a combination of industry-leading tools, services, and expertise, only Black Duck helps organizations maximize security and quality in DevSecOps and throughout the software development life cycle.
Key Responsibilities:
- Deploy and set up test instances and PostgreSQL OR Any databases on-prem on Linux and in the cloud in AWS OR GCP leveraging Docker, Kubernetes, and Jenkins and working heavily in the command-line.
- Troubleshoot deployment issues, test issues, and product issues.
- Develop performance tests using tools such as LoadRunner, DevWeb (JavaScript), Apache Benchmark (ab), and Cypress, and custom tools and scripts written in Python, Perl, Bash, and SQL.
- Monitor, analyze, and use whatever it takes to diagnose issues and bottlenecks and gain insights, including but not limited to: test results, Jenkins logs, application logs, PostgreSQL logs, Docker, Kubernetes, NetData, Prometheus, Grafana, New Relic, Datadog, AWS or GCP cloud monitoring, RabbitMQ, custom PostgreSQL OR DBA queries.
- File and track product issues in Jira with sufficient details for developers to reproduce and fix the issues.
- Work closely with engineering teams to investigate and mitigate problems found in testing.
- Improve automation so that more time can be spent analyzing measurements rather than just obtaining them.
- Take ownership of tasks, demonstrate initiative, communicate proactively, learn from mistakes, and continuously improve.
Key Requirements (Must):
- Enjoy performance engineering, are good at it, and have 6+ years of dedicated experience doing it, preferably with complex, containerized, distributed products in the cloud.
- Strong experience with:
o Linux
o Docker and Kubernetes
o GCP and/or AWS
o LoadRunner, JMeter, or other performance testing tools
o Scripting, such as with Bash, Perl, or Python
o Diagnosing bottlenecks in PostgreSQL queries or other relational database queries
o Performance monitoring tools such as New Relic, Prometheus, Grafana, or Datadog
Black Duck is an equal opportunity employer. We consider all applicants for employment without regard to race, color, national origin, religion, sex, gender identity or expression, age, disability, sexual orientation, veteran or military service status, or any other characteristic protected by applicable law. Black Duck complies with all applicable laws prohibiting employment discrimination in every jurisdiction where it operates and provides reasonable accommodations to individuals with disabilities in accordance with applicable law.
Skills Required
- 6+ years of dedicated performance engineering experience with complex, containerized, distributed cloud products
- Strong experience with Linux
- Experience with Docker and Kubernetes
- Experience with GCP and/or AWS
- Experience with LoadRunner, JMeter, or other performance testing tools
- Scripting skills (Bash, Perl, or Python)
- Ability to diagnose bottlenecks in PostgreSQL or other relational database queries
- Experience with performance monitoring tools such as New Relic, Prometheus, Grafana, or Datadog
- Experience deploying and troubleshooting test instances using Docker, Kubernetes, and Jenkins
- Familiarity with test tools like DevWeb (JavaScript), Apache Benchmark (ab), Cypress and working knowledge of SQL
Black Duck Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Black Duck and has not been reviewed or approved by Black Duck.
-
Healthcare Strength — Medical, dental, and vision coverage provide multiple plan choices with transparent costs, with carrier updates noted for 2026. Vision via VSP and dental plan options offer defined tiers and network access.
-
Retirement Support — Retirement programs include a 401(k) with company matching alongside an employee stock purchase plan with a discount and lookback. These features support longer‑term savings and wealth building.
-
Leave & Time Off Breadth — Exempt employees use a manager‑approved, no‑cap time‑off model, while non‑exempt employees accrue flexible time off alongside sick time. Paid leaves include parental and family care leave, with additional protections under applicable leave laws.
Black Duck Insights
What We Do
Organizations worldwide use Black Duck Software’s industry-leading products to secure and manage open source software, eliminating the pain related to security vulnerabilities, compliance and operational risk. Black Duck is headquartered in Burlington, MA, and has offices in San Jose, London, Frankfurt, Hong Kong, Tokyo, Vancouver, Seoul & Beijing
Why Work With Us
We pride ourselves on cultivating an environment of collaboration, creativity, and fun! We know where you work can influence how you work, which is why our collaborative office space focuses on community and continuous learning. Our work-hard, play-hard attitude even got us named a Top Place to Work in Massachusetts by The Boston Globe!
Gallery
