Job Summary
Security Application Onboarding Engineer L3 – Black Duck Role Summary The Security Application Onboarding Engineer L3 is a senior Application Security and DevSecOps professional responsible for leading enterprise-wide application onboarding, software supply chain security initiatives, and Black Duck platform strategy. This role serves as the technical Subject Matter Expert (SME) for Black Duck SCA, driving secure software development practices, risk reduction programs, CI/CD security integration, and governance across the application portfolio
Key Responsibilities
Experience • 6 to 10+ years of experience in Cybersecurity, IAM, or Application Security. • 3+ years of hands-on experience in security application onboarding and integration. • Experience leading enterprise-scale security implementation projects. • Strong troubleshooting experience in authentication, federation, and access management technologies. ________________________________________ Black Duck Platform Ownership • Act as the primary SME for Black Duck SCA platforms and integrations. • Manage platform architecture, scalability, and operational excellence. • Define and implement enterprise scanning policies and governance controls. • Lead Black Duck upgrades, integrations, and platform optimization initiatives. • Design role-based access models and reporting frameworks. • Drive adoption of advanced SCA capabilities across the organization. Security Integration & Engineering • Integrate applications with: o IAM (Identity & Access Management) o SSO (SAML 2.0, OAuth 2.0, OpenID Connect) o MFA Solutions o PAM Solutions o SIEM Platforms o Directory Services (Active Directory, Entra ID/Azure AD) • Develop and validate authentication and authorization workflows. • Support cloud and on-premises application security integrations. Governance & Compliance • Ensure applications comply with organizational security policies. • Support audits, risk assessments, and regulatory compliance requirements. • Review onboarding exceptions and recommend remediation plans. • Drive security control implementation across application environments. Stakeholder Management • Collaborate with application owners, architects, developers, infrastructure teams, and security leadership. • Manage multiple onboarding projects and prioritize according to business needs. • Present onboarding status, risks, and recommendations to senior management. Operational Excellence • Analyze recurring onboarding issues and implement permanent fixes. • Create automation opportunities to streamline onboarding processes. • Develop technical documentation, SOPs, and knowledge articles. • Mentor L1/L2 engineers and conduct technical knowledge-sharing sessions.
Skill Requirements
Black Duck Expertise • Advanced administration and governance of Black Duck SCA. • Enterprise application onboarding and policy management. • Vulnerability and license compliance analysis. • Scan optimization and troubleshooting. • Reporting, dashboards, and risk analytics. • API integration and workflow automation. ITSM & Process • ServiceNow • Incident Management • Change Management • Problem Management KPI • Design onboarding solutions rather than only execute them. • Handle complex authentication and integration issues. • Lead onboarding projects independently. • Review and approve security architectures. • Mentor L1/L2 engineers. • Drive automation and continuous improvement initiatives. • Engage directly with architects, application owners, and senior leadership.