Black Duck Software, Inc. helps organizations build secure, high-quality software, minimizing risks while maximizing speed and productivity. Black Duck, a recognized pioneer in application security, provides SAST, SCA, and DAST solutions that enable teams to quickly find and fix vulnerabilities and defects in proprietary code, open source components, and application behavior. With a combination of industry-leading tools, services, and expertise, only Black Duck helps organizations maximize security and quality in DevSecOps and throughout the software development life cycle.

We are a critical, high-impact team providing performance testing and actionable guidance for our company’s core Software Composition Analysis (SCA) and Static Application Security Testing (SAST) Java-based Web applications, where customers view and triage results from our analysis products.

If you enjoy the autonomy of being a full-stack performance engineer working on complex technical stacks (distributed systems, microservices, cloud-native) with endless learning opportunities where you will be empowered to dig deep and discover root causes behind any performance issues, you’ll feel at home here.

Key Responsibilities:

• Deploy and set up test instances and PostgreSQL databases on-prem on Linux and in the cloud in AWS and GCP leveraging Docker, Kubernetes, and Jenkins and working heavily in the command-line.

• Troubleshoot deployment issues, test issues, and product issues.

• Develop performance tests using tools such as LoadRunner, DevWeb (JavaScript), Apache Benchmark (ab), and Cypress, and custom tools and scripts written in Python, Perl, Bash, and SQL.

• Monitor, analyze, and use whatever it takes to diagnose issues and bottlenecks and gain insights, including but not limited to: test results, Jenkins logs, application logs, PostgreSQL logs, Docker, Kubernetes, NetData, Prometheus, Grafana, New Relic, Datadog, AWS or GCP cloud monitoring, RabbitMQ, custom PostgreSQL queries.

• File and track product issues in Jira with sufficient details for developers to reproduce and fix the issues.

• Work closely with engineering teams to investigate and mitigate problems found in testing.

• Present key findings and actionable insights and guidance to technical and non-technical audiences in clear and meaningful presentations and other communications.

• Collaborate with a diverse set of distributed stakeholders, building trust, credibility, and positive relationships.

• Write and maintain clear documentation in Confluence.

• Verify performance improvements and fixes.

• Ensure performance does not regress.

• Improve automation so that more time can be spent analyzing measurements rather than just obtaining them.

• Take ownership of tasks, demonstrate initiative, communicate proactively, learn from mistakes, and continuously improve.

Key Requirements:

• Enjoy performance engineering, are good at it, and have 8+ years of dedicated experience doing it, preferably with complex, containerized, distributed products in the cloud.

• Strong experience with:

  • Linux

  • Docker and Kubernetes

  • GCP and/or AWS

  • LoadRunner, JMeter, or other performance testing tools

  • Scripting, such as with Bash, Perl, or Python

  • Diagnosing bottlenecks in PostgreSQL queries or other relational database queries

  • Performance monitoring tools such as New Relic, Prometheus, Grafana, or Datadog

• Are comfortable with ambiguity and venturing into the unknown and accept that failure is part of the job because we’re always pushing our products to discover their limits.

• Strong analytical skills with ability to question and find deep meaning in data.

• Prefer ownership and growth over handholding and stagnation.

• Passionate about learning and growing and committed to delivering high-quality work.

• Able to persevere through challenges and unblock self through research, experimentation, and critical thinking.

• Value simplification, reusability, knowledge sharing, and standardization over ad hoc heroics.

Nice to have: 

• Java Web applications that use RabbitMQ
• Apache Benchmark (ab)
• Cypress
• Jenkins
• DevWeb (JavaScript)

If you enjoy the types of challenges that this position encompasses, you will thrive here!

Black Duck considers all applicants for employment without regard to race, color, religion, sex, gender preference, national origin, age, disability, or status as a Covered Veteran in accordance with federal law. In addition, Black Duck complies with applicable state and local laws prohibiting discrimination in employment in every jurisdiction in which it maintains facilities. Black Duck also provides reasonable accommodation to individuals with a disability in accordance with applicable laws.