3 Blackduck Jobs

Position Purpose The purpose of the position is to help with the information security topics mentioned in the direct responsibilities. Responsibilities Direct Responsibilities - Executing IT risk assessment reviews, identifying controls gaps and working in collaboration with subject matter experts to devise appropriate mitigation plans. Identifying key risk trends, issues and other insights requiring further investigation and following up with Technology as appropriate. Knowledge of Secure Development methodologies and frameworks. Hands-on experience in penetration testing and tools like AppScan, Webinspect, Fortify, AppSpider, BurpSuite, Qualys, Checkmarx, Coverity Well-versed in conducting Security Review, Assessments and providing recommendations. Knowledge of OWASP, SANS standards. Experience in Process Improvement, Controls Enhancement and Reporting. - Engaging with organization wide risk and control groups, including internal audit and territory control teams. - Working with Technology stakeholders (including Production Support and Development teams) to identify the IT risks affecting the organization and formulating appropriate remediation strategies based on full understanding of business exposure and compensating controls. Contributing Responsibilities Excellent understanding of development security and its implementation in systems: identification, authentication, access control and provisioning, alignment of jurisdiction to business process Knowledge of single-sign-on security strategies (e.g. SAML, OAUTH2, SiteMinder etc.) Excellent understanding of authentication related mechanisms (Kerberos, One Time Passwords, PKI) Good understanding of cryptography and its practical uses within secure application development Familiarity with common security vulnerabilities (e.g. OWASP Top 10) Strong technical skills required to understand vulnerabilities in detail and how to resolve/mitigate them. Excellent knowledge of programming best practices, design patterns, etc. Excellent problem solving skills, being able to develop approaches to complex technology and strategy problems, building consensus across diverse interest groups and working within constraints of practical delivery yet able to think beyond the requirements of immediate issues. Well-developed written communication skills with the ability to summarise key issues, conclusions and recommendations in report form. Target audiences will include regulatory authorities and internal/external auditors. Technical & Behavioral Competencies Excellent knowledge of programming best practices, design patterns, etc. Excellent problem solving skills, being able to develop approaches to complex technology and strategy problems, building consensus across diverse interest groups and working within constraints of practical delivery yet able to think beyond the requirements of immediate issues. Well-developed written communication skills with the ability to summarize key issues, conclusions and recommendations in report form. Target audiences will include regulatory authorities and internal/external auditors. Hands-on experience in penetration testing and tools like AppScan, Webinspect, Fortify, AppSpider, BurpSuite, Qualys, Checkmarx, Coverity, Sonatype, Blackduck Well-versed in conducting Security Review, Assessments and providing recommendations. Knowledge of OWASP, SANS standards. Experience in Process Improvement, Controls Enhancement and Reporting. Excellent Inter personal and presentation skills Strong in verbal and written communication Ability to liaise with cross-functional stakeholders globally Clear understanding of application and data security Must be flexible, independent, self-motivated Good analytical skills Specific Qualifications (if required) - CEH, SSCP, OSCP certified. - Technical Graduate (Computer Science) Preferable. Skills Referential Behavioural Skills : (Please select up to 4 skills) Ability to collaborate / Teamwork Communication skills - oral & written Ability to share / pass on knowledge Active listening Transversal Skills: (Please select up to 5 skills) Ability to understand, explain and support change Analytical Ability Ability to develop and adapt a process Ability to develop and leverage networks Ability to manage / facilitate a meeting, seminar, committee, training Education Level: Bachelor Degree or equivalent Experience Level At least 7 years

JOB DESCRIPTION ACI Worldwide Inc. (:) is acompany headquartered inElkhorn NebraskaACI develops a broad line of software focused on facilitating real-time electronic payments. These products and services are used globally by,such as third-party electronic, payment associations, switch interchanges,, corporations, and a wide range of transaction-generating endpoints, including(ATM), merchant(POS) terminals, bank branches,,,, and internet commerce sites In short, we're helping banks, merchants and billers capture rising real-time opportunities and volumes, all to meet the shifting needs of their consumers and business customers. Our people are the core of our business and our team represents a globally diverse, passionate and dedicated group of thousands of individuals around the world who share a common commitment to making our customers successful by driving the future of payments.As a Senior Software Engineer you can help make possibilities happen. ACI Secure eCommerce delivers global payment gateway solutions for payment service providers, Independent eCommerce retailers, Third party acquirers and Independent software Vendors, enabling them to fully outsource payment transaction processing including cross border Payments and or integrate a gateway-to-gateway solutions which are PCI-compliant and provide access to more than 300 global acquirers delivering alternative payment methods such aseWallets, mobile payments and more, in multiple languages and all major currencies enabling payment providers to rapidly increase global revenues, reduce costs and risk, and accelerate market expansion by offering innovative channels. Key Responsibilities: Innovative Development: Drive the design and development of critical components, ensuring they align with the product's roadmap and business goals. Leverage your deep understanding of software engineering principles to create efficient, reliable, and elegant solutions. Code Quality and Best Practices: Set and enforce high coding standards, best practices, and development processes. Lead code reviews, ensuring code quality, consistency, and adherence to architectural guidelines. Collaborative Excellence : Partner with product managers, partner teams, and other stakeholders to understand requirements, provide technical insights, and deliver solutions that exceed customer expectations. Technical Mentorship: Inspire the team in setting technical direction, providing mentorship, and promoting a culture of excellence in software development. Technical Design: Contribute to the formulation of the solution design and technical strategies including the adoption and evaluation of new technologies, tools, and methodologies. Stay abreast of industry trends and emerging technologies to drive innovation. Collaborative Excellence : Partner with product managers, partner teams, and other stakeholders to understand requirements, provide technical insights, and deliver solutions that exceed customer expectations. Performance Optimization : Identify performance bottlenecks and optimize software components to deliver a fast and seamless user experience. Documentation and Knowledge Sharing: Create and maintain comprehensive technical documentation, sharing knowledge and insights across the team. Minimum Qualifications 3-6 years of software development experience in working on Java 17+ (Spring boot / Hibernate & MicroServices) with knowledge / experience in Multithreading, Concurrency, Collections and serialization with an ability to write secure defensive code. Strong experience in API development and working on RESTful API's / SOAP and expertise in product & technical design along with Web Application architecture . Keep track of deliverables and individual work plans, manage budgets, resource tasks and be involved in Code Reviews. Experience in working with CI/CD Pipelines, Jenkins and Docker. Knowledge and or Experience in working with RDBMS (Oracle / Sybase / PostgreSQL / DB2) and working with complex SQL Queries Experience in Linux / Unix) environment, basic system Commands (UNIX ) Familiarity with code management tools (GIT, Synergy, etc.) is desirable. Experience in Payment Gateway (OWAPS Guidelines) and exposure to different security tools like Checkmarx, Blackduck, SonarQube (SAST/DAST) etc.) Willingness to learn and adapt to both legacy and new age technologies, to solve problems and take the product in new directions. Ability to collaborate with a global team and work with attention to detail & multitask under tight deadlines. Previous card payments or ecommerce domain experience with knowledge of Retail Banking, Omni Commerce Payment ecosystem & Card networks such as VISA, Mastercard, Discover etc. Highly Desired Qualifications Previous experience in developing payments software solutions & Card networks such as VISA, MasterCard, Discover, AMEX, JCB, etc. Business knowledge about card payments industry is a plus. Work Experience in Agile Methodology would be preferable. Education: BE, BTech Comp Science, BTech Electronics, BE / BTech IT, MSc Comp Sc, MCA In return for your expertise, we offer growth, opportunity, and a competitive compensation and benefits package in a casual work environment. Our benefits are the Best in Industry such as Health Insurance for Employee and Family with periodic health checkups. Paid time off and sick time off Maternity and Paternity time off. Robust rewards and awards program. Are you ready to help us transform the world of electronic payments To learn more about ACI Worldwide, visit our web site at.

About this role: Wells Fargo is seeking a Lead Software Engineer within CT Cloud Engineering team In this role, you will: Migrate applications from TAS (formerly PCF) to OpenShift Container Platform. Contribute towards containerizing an application, by following the standard development practices. Leverage DevOps tools to migrate applications on OpenShift Container Platform. Integrate application with other middleware, monitoring, logging products to ensure smooth operations. Follow SDLC best practices, troubleshoot migration issues & be vocal as a Consultant for application teams to ease the migration journey. Collaborate and consult with key technical experts, senior technology team, and external industry groups to resolve complex technical issues and achieve goals. Working in a globally distributed team to provide innovative and robust Cloud centric solutions. Closely working with Product Team and Vendors to develop and deploy Cloud services to meet customer expectations. Required Qualifications: 5+ years of Software Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education Desired Qualifications: Overall 5+ years of experience, 2+ years working with OCP (OpenShift Container Platform). Must have 5+ years of hands-on experience on Java .Net (C# or other) language. Must have 5+ years of exposure and knowledge on different DevOps tools - GitHub, Jenkins, Harness, Blackduck, Checkmarx. Must have exposure and knowledge on infrastructure skills on maintaining the Kubernetes clusters, workloads, services. In depth, practical experience with Cloud methodologies (IaaS, PaaS, SaaS), microservices, orchestration etc... Job Expectations: Proficient and have a thorough understanding of various Cloud service offerings Well versed with Agile methodologies, product operating model and experience working in/for big enterprises