Senior AppSec Strategy Lead for DevSecOps & Roadmaps

Black-Duck-Software; Atlanta (GA); On-site; USD 124,000 - 185,000; Full time

Job summary

Black Duck Software, Inc. in the United States seeks a Lead Strategic Services Consultant with deep expertise in DevSecOps tooling, software security, governance, and maturity modeling to guide client engagements and deliver strategic roadmaps.

You will translate assessment findings into actionable programs aligned to BSIMM and NIST SSDF, delivering roadmaps and executive‑level recommendations to CISOs and software leaders.

Qualifications

• 5–8+ years of experience in application security, software assurance, or product security consulting.
• Ability to lead assessments against BSIMM and SSDF and develop multi-year AppSec roadmaps.
• Excellent client-facing communication, facilitation, and presentation skills.
• Ability to translate technical findings into executive-level narratives and actionable plans.

Responsibilities

• Assist customers with AppSec program design and maturity assessments using BSIMM/SSDF.
• Lead roadmap development defining target state and 12–36‑month plans with metrics.
• Facilitate executive-level workshops and align initiatives to risk and compliance goals.
• Deliver strategic presentations and recommendations to CISOs, CTOs, and software leadership.
• Contribute to internal frameworks, templates, and accelerators for AppSec programs.
• Support DevSecOps and CI/CD operations and provide governance guidance.

Skills

DevSecOps tooling

Software security

Governance

Maturity modeling

Executive communication

Tools

BSIMM

NIST SSDF

OWASP SAMM

Job description

Black Duck Software, Inc. in the United States seeks a Lead Strategic Services Consultant with deep expertise in DevSecOps tooling, software security, governance, and maturity modeling to guide client engagements and deliver strategic roadmaps.

You will translate assessment findings into actionable programs aligned to BSIMM and NIST SSDF, delivering roadmaps and executive‑level recommendations to CISOs and software leaders.