Principal Software Engineer (Agentic Integration)

Black Duck Software Inc. helps organizations build secure high-quality software minimizing risks while maximizing speed and productivity. Black Duck a recognized pioneer in application security provides SAST SCA and DAST solutions that enable teams to quickly find and fix vulnerabilities and defects in proprietary code open source components and application behavior. With a combination of industry-leading tools services and expertise only Black Duck helps organizations maximize security and quality in DevSecOps and throughout the software development life cycle.

Principal Software Engineer Agentic Integrations

Location: Calgary Alberta

Black Duck Software Inc. helps organizations build secure high-quality software minimizing risks while maximizing speed and productivity. Black Duck a recognized pioneer in application security provides SAST SCA and DAST solutions that enable teams to quickly find and fix vulnerabilities and defects in proprietary codeopen sourcecomponents and application behavior. With a combination of industry-leading tools services andexpertise only Black Duck helps organizations maximize security and quality inDevSecOpsand throughout the software development life cycle.

Role Overview

The Integrations team is looking for aPrincipal Software Engineerwho can architect not just implement the agentic workflows that connect Black Ducks application security products (SAST SCA and DAST) directly into the developers agentic workflow. This role is less about general programming depth and more about the hands-on experience needed to design and harden production-grade AI agent systems multi-agent orchestration tool use and MCP-based integrations that AI coding agents IDEs and orchestration frameworks can consume natively extending work already underway on projects like the Black Duck MCP Gateway and SAST AI Fix Recommendation.

This is a hands-on senior technical role built for someone who takes for an engineer whodoesntwaitto be told what to build who spots gaps in how our products show up in the agentic developer workflow proposes a direction and drives it to production. Youll be setting the architecture and technical direction not just executing against a spec for how Black Duck shows up inside the tools developers already use from IDEs to CI/CD to PR workflows while partnering closely with Product and Applied AI teams shaping the companys broader agentic strategy.

Key Responsibilities

• Own the big picture solution architecture for the integrations team designing and hardening how agentic workflows MCP surfaces and multi-agent orchestration patterns (task decomposition tool use agent hand-off frameworks such asPydanticAILangChain andLangGraph) fit together as a coherent system across IDEs CI/CD and pull request workflows. This is the core capability the role exists to fill more so than general programming depth on its own.
• Identifynew opportunities to bring Black Ducks capabilities into agentic developer and CI workflows and take the initiative to prototype pitch and build them this role is as much about proposing what we should build next as executing on whats already defined
• Design build and implement agentic workflows and integrations spanning agents skills MCP-based tooling and APIs that bring Black Ducks AppSec products (SAST SCA DAST) into developer tooling with strong attention to governance permissions and auditability
• Own the technical direction and continued development of theBlack Duck MCP Gateway expanding the surface area of tools and capabilities it exposes to AI agents and IDEs
• Contribute and evolve existing agentic capabilities such asSAST AI Fix Recommendation improving remediation guidance and automated fix generation for developers
• Mentor engineers on agentic system design and modern integration patterns

Required Qualifications

• Hands-on experience building agentic AI systems multi-agent orchestration tool use task decomposition ( or equivalent)
• Experience building or integratingModel Context Protocol (MCP)servers or comparable plugin/tool architecturesinAI assistantsIDEs and CI/CD workflows
• 2 years hands-on experience applying LLMs into production workflows prompt engineering RAG pipelines API-based model integrationagenteval frameworks with real examples not just prototypes
• Strong API and systems design skills experience shipping integrations SDKs reusable connectors orcanonicalmodels consumed across systems of record and by external developers
• Experience with CI/CD Git workflows and modern developer tooling
• A demonstratedtrack recordof taking initiative and owning technical projects end-to-end identifyingopportunities proposing solutions and driving delivery from design through production with minimal oversight
• Strong cross-functional communication skills comfortable working across Product Applied AI and platform engineering
• Broad well-rounded software engineering background (8 years) Python TypeScript/JavaScript Go APIs distributed systems and modern SCMs (GitLab GitHub Bitbucket Azure)

Preferred (Nice to Have)

• Experience in Application Security (SAST SCA DAST ASPM) orDevSecOpstooling
• Experience with AI-assisted development tools (GitHub Copilot Claude Code Cursor or similar)
• Deep technical depth in LLM integration vector databases/retrieval pipelines (PineconeWeaviateChromaDBQdrantpgvector) function calling/tool use and structured output parsing
• Experience publishing andmaintainingdeveloper-facing packages (npmPyPI etc.)
• Background contributing to open-source developer tooling or SDKs

Black Duck is an equal opportunity employer. We consider all applicants for employment without regard to race color national origin religion sex gender identity or expression age disability sexual orientation veteran or military service status or any other characteristic protected by applicable law. Black Duck complies with all applicable laws prohibiting employment discrimination in every jurisdiction where it operates and provides reasonable accommodations to individuals with disabilities in accordance with applicable law.