Job Summary
Security Infrastructure: Data Security Analyst L2 (Black Duck)
Key Responsibilities
Job Description (JD) – Security Infrastructure: Data Security Analyst L2 (Black Duck) Job Title Data Security Analyst L2 – Black Duck (Security Infrastructure) Role Summary The Data Security Analyst L2 is responsible for supporting and enhancing the organization\'s Data Security and Software Supply Chain Security program using Black Duck. The role focuses on identifying risks associated with open-source components, protecting sensitive data within applications, ensuring compliance with data protection requirements, and driving remediation efforts across development and infrastructure teams. The analyst serves as a technical escalation point for L1 resources and collaborates with Application Security, DevOps, Infrastructure, Risk, Compliance, and Development teams to strengthen security posture and reduce data exposure risks. ________________________________________ • 3-5 years of experience in Data Security, Application Security, DevSecOps, Vulnerability Management, or Security Engineering. • Minimum 2 years of experience with Black Duck or equivalent SCA solutions. Black Duck Administration & Analysis • Administer and manage Black Duck projects, policies, and scanning workflows. • Review software composition analysis (SCA) results and security findings. • Assess open-source component vulnerabilities and their impact on data security. • Analyze transitive dependencies and software supply chain risks. • Validate scan results and reduce false positives. Data Security • Strong understanding of data security principles. • Knowledge of data classification and protection methodologies. • Familiarity with data privacy and regulatory requirements. • Understanding of access control and data protection mechanisms. • Knowledge of security controls for protecting sensitive information. Black Duck & Software Supply Chain Security • Hands-on experience with Black Duck SCA. • Open-source vulnerability assessment. • License compliance analysis. • Dependency risk management. • Software supply chain security concepts. • SBOM awareness and governance. Application Security • Knowledge of Secure Software Development Lifecycle (SSDLC). • Understanding of OWASP Top 10. • Vulnerability assessment and remediation processes. • Risk-based security analysis. ________________________________________ Preferred Certifications Data Security & Privacy • CDPSE (Certified Data Privacy Solutions Engineer) • GDPR Practitioner • Data Protection Certifications
Skill Requirements
Job Description (JD) – Security Infrastructure: Data Security Analyst L2 (Black Duck) Job Title Data Security Analyst L2 – Black Duck (Security Infrastructure) Role Summary The Data Security Analyst L2 is responsible for supporting and enhancing the organization\'s Data Security and Software Supply Chain Security program using Black Duck. The role focuses on identifying risks associated with open-source components, protecting sensitive data within applications, ensuring compliance with data protection requirements, and driving remediation efforts across development and infrastructure teams. The analyst serves as a technical escalation point for L1 resources and collaborates with Application Security, DevOps, Infrastructure, Risk, Compliance, and Development teams to strengthen security posture and reduce data exposure risks. ________________________________________ • 3-5 years of experience in Data Security, Application Security, DevSecOps, Vulnerability Management, or Security Engineering. • Minimum 2 years of experience with Black Duck or equivalent SCA solutions. Black Duck Administration & Analysis • Administer and manage Black Duck projects, policies, and scanning workflows. • Review software composition analysis (SCA) results and security findings. • Assess open-source component vulnerabilities and their impact on data security. • Analyze transitive dependencies and software supply chain risks. • Validate scan results and reduce false positives. Data Security • Strong understanding of data security principles. • Knowledge of data classification and protection methodologies. • Familiarity with data privacy and regulatory requirements. • Understanding of access control and data protection mechanisms. • Knowledge of security controls for protecting sensitive information. Black Duck & Software Supply Chain Security • Hands-on experience with Black Duck SCA. • Open-source vulnerability assessment. • License compliance analysis. • Dependency risk management. • Software supply chain security concepts. • SBOM awareness and governance. Application Security • Knowledge of Secure Software Development Lifecycle (SSDLC). • Understanding of OWASP Top 10. • Vulnerability assessment and remediation processes. • Risk-based security analysis. ________________________________________ Preferred Certifications Data Security & Privacy • CDPSE (Certified Data Privacy Solutions Engineer) • GDPR Practitioner • Data Protection Certifications
Other Requirements
Security Infrastructure: Data Security Analyst L2 (Black Duck)