Strategic AppSec Consultant & Roadmap Leader

Black Duck; Chicago (IL); On-site; USD 124,000 - 185,000; Full time

Job summary

Black Duck is seeking a Lead Strategic Services Consultant with deep expertise in DevSecOps tooling, software security, governance, maturity modeling and framework-driven transformation planning.

You will lead client engagements to assist in DevSecOps and CI/CD pipeline configuration and operations, assess AppSec Programs against established frameworks, and design and deliver AppSec Program Strategic Roadmaps to help organizations build secure software development capabilities.

Qualifications

• Experience in application security, software assurance, or security consulting.
• Ability to synthesize technical findings for executive audiences.
• Understanding of BSIMM, NIST SSDF, or OWASP SAMM frameworks.

Responsibilities

• Assist customers with AST tool configurations in pipelines.
• Provide triage support for AST findings.
• Lead AppSec Program maturity assessments using BSIMM and SSDF.
• Develop Strategic Roadmaps with target state, 12–36 month plan, resources, metrics.
• Facilitate workshops with executives, engineering and AppSec leaders.
• Deliver strategic presentations to CISOs, CTOs and software leadership.
• Contribute to internal frameworks, templates, and accelerators.
• Contribute to thought leadership via webinars or press.

Tools

Gitlab CI/CD

Python

AWS

Grafana

Job description

Black Duck is seeking a Lead Strategic Services Consultant with deep expertise in DevSecOps tooling, software security, governance, maturity modeling and framework-driven transformation planning.

You will lead client engagements to assist in DevSecOps and CI/CD pipeline configuration and operations, assess AppSec Programs against established frameworks, and design and deliver AppSec Program Strategic Roadmaps to help organizations build secure software development capabilities.