Teams at Black Duck

Operate and scale global customer-facing SaaS infrastructure on GCP: design resilient architectures, run and upgrade GKE clusters, implement CI/CD/GitOps, monitor and troubleshoot performance, ensure security/compliance, and coordinate cross-functional releases and incident response.

Leads product security across Black Duck products by overseeing secure architecture, threat modeling, secure code reviews, security requirements, supply chain security, and secure development lifecycle controls. Builds security enablement and Security Champions programs, coordinates assessments and vulnerability remediation, supports PSIRT and incident response, measures security maturity, advises on regulatory obligations, and mentors engineering teams.