Black Duck
blackduck.com
Actively hiring
DevSecOps
Application Security
As featured in
View 26 jobs
Claim pageClaim
Follow
Overview
Connections
News
Technologies
Salaries
Products
People
Growth
Offices
Jobs
Financials
How Black Duck hires
Truth index
A 87/100
Median time to fill
67 days
Ghost roles
0%
Stale roles
33%
Reposted roles
0%
Black Duck scores A on the Alion truth index (A is best, E worst), measured over 6 open roles re-checked against its own hiring board: 0% look like ghost listings, 33% have gone stale and 0% are the same role posted again. Its roles close in a median of 67 days. It measures how much of what this employer publishes turns into a real, finite search - not the employer as a workplace. How the index is computed
Overview
Black Duck is a leading application security enterprise specializing in software supply chain security and open-source risk management. The company focuses on delivering automated solutions to detect software vulnerabilities, manage license compliance, and secure digital codebases. Headquartered in Burlington, Massachusetts, it serves enterprise clients worldwide to streamline secure software development workflows.
Connections
List
Graph
Found in company registers, site code, DNS and hiring. Each connection shows how sure we are and the evidence, with its source and date.
Shared investors
Francisco PartnersVia a fund
Sapphire VenturesVia a fund
Click a company to open it. Dashed lines are likely connections. The second step of the network is part of the Pro plan.
Owner
Same company
Same group
Likely
News
The real and hidden costs of AI security programs
As organizations race to adopt AI across software development and security, the pressure to move fast is colliding with the mandate to stay economical, repeatable, and defensible. The biggest risk isn't adopting too slowly. It's scaling without understand
Read more
Report
Agentic AppSec on your infrastructure with Black Duck Signal
Agentic development has enabled enterprises to accelerate the pace of innovation while freeing developers to focus on more strategic initiatives. But for many regulated organizations, the idea of sending source code and analysis prompts to vendor-managed
Read more
Report
The vulnerability you didn't write
Your base image might contain someone else's problem, right up until you ship it Pulling a base image is routine. You grab it, build on top of it, ship the container, and move on. It is fast, reproducible, and usually reliable. The catch is that every bas
Read more
Report
Stories from the field, part 2: When vulnerability scores don't tell the whole story
Understanding the potential security vulnerabilities introduced by the open source packages in a codebase is essential. The teams need visibility into affected components, severity scores, and available fixes. But anyone who has worked through a real soft
Read more
Report
OSSRA 2026: Open source vulnerability counts doubled year-over-year
Open source vulnerability risk is no longer growing gradually. According to the 2026 "Open Source Security and Risk Analysis" (OSSRA) report, the mean number of vulnerabilities per codebase jumped 107% since last year's report. Yes, you read that correctl
Read more
Report
Polaris release update: Two-way bug tracker sync, AI-assisted fixes, scanning you can govern
Most AppSec friction is administrative. A vulnerability gets fixed, but the ticket stays open. A triage decision made in Jira never reaches Polaris. Code on an internal server can't be scanned without a firewall exception. Three repositories scan against
Read more
Report
Polestar's U.S. market exit is a warning for automakers
When Polestar announced that it would stop selling new vehicles in the United States starting with model year 2027, it wasn't a business strategy pivot driven by demand. It was a direct consequence of a regulatory decision that every automaker importing c
Read more
Report
The AI coding security gap: Why faster development demands stronger guardrails
AI can dramatically accelerate software delivery, but speed without security creates new forms of risk Anyone who's watched an AI coding assistant generate a working API endpoint, scaffold a microservice, produce a comprehensive test suite, or create a us
Read more
Report
AI application security needs both reasoning and assurance
Frontier models can detect real vulnerabilities at scale. They reason across application logic, analyze authorization flows, identify multistep vulnerabilities, and propose context-aware remediation. That capability is real. But it can lead to a risky con
Read more
Report
The hidden liabilities in open source AI model adoption
You download an open source AI model with an Apache 2.0 license and figure you're safe to use it commercially. With the license green light, you go ahead and deploy it. But here's the thing nobody talks about: 76% of open source AI models are trained on d
Read more
Report
Show more news
Tech stack
Technologies named in job postings at Black Duck over the last 12 months, by layer, with the share of postings for each.
Technologies in use
154
Postings analysed
81
Stack modernity
84/100AI adopter
Languages
Python49%
Java31%
C++23%
C#22%
Frameworks & libraries
Cypress4%
LangChain4%
LangGraph4%
Spring Boot4%
Databases
PostgreSQL9%
Pinecone2%
Qdrant2%
Weaviate2%
Cloud & platforms
AWS33%
Azure31%
GCP30%
Kubernetes28%
AI & ML
LLM19%
Claude6%
ChatGPT4%
Sign in to see how your skills match this stack
Sign In
Full Black Duck tech stack
154 technologies · by team · pay by technology · changes · similar stacks
Salary insights
Compensation ranges based on this company's open jobs
Median
$115k
Typical range
$64k – $212k
Open positions
13
12
Jobs
Junior
16.7%
Middle
8.3%
Senior
33.3%
Staff
33.3%
Architect
8.3%
| Level | Jobs | Median | Typical range |
|---|---|---|---|
| Junior | 2 | $89k | $64k – $115k |
| Middle | 1 | $89k | $89k |
| Senior | 4 | $103k | $76k – $120k |
| Staff | 4 | $212k | $90k – $212k |
| Architect | 1 | $134k | $134k |
Highest paying role
Lead Sales Engineer (South East)
$212k
Normalized to USD per year
All salaries at Black Duck
By role, level and city, against the market · 13 jobs with pay
People
Anita D'amico
Executive Officer
Frank Zinghini Jr.
Director
Names and roles come from public filings, company registers and the company's own site. Is this you? Correct or remove · How we handle this data
Growth
Hiring Momentum
76/100
Scaling fast
Open positions
33
9 opened / 25 closed in 30 days
Median time-to-fill
65 days
faster than 19% of the market
ATS activity
Every ~4 hours
Today
Hiring Dynamics
+50%
Hiring Focus
The percentage next to each role is its share of the company's job openings over the last 90 days; the arrow shows the shift versus the previous period.
Solutions
30% ▲
Backend
19% ▼
Sales
17% ▼
Industrial Engineering
6% ▼
DevOps
4% ▲
Marketing
4% ▼
Actively hiring for Solutions (+7 in 30 days)
Activity Timeline
+5 jobs in a week
Oct 2026
New location: United Arab Emirates
Oct 2026
New location: France
Oct 2026
Added PCI DSS to stack
Oct 2026
Added CVE to stack
Oct 2026
New location: Burlington
Oct 2026
New location: Austin
Oct 2026
New location: Jacksonville
Oct 2026
New location: Canada
Oct 2026
New location: United Kingdom
Oct 2026
New location: Sweden
Oct 2026
Added FedRAMP to stack
Oct 2026
Offices
Where the company hires and what each office is for
Cities
17
Hiring now
9
Countries
8
Busiest office
Burlington
Loading the map
Headquarters
Builds here
Office with open vacancies
No open vacancies right now Tap a pin for the office
Burlington
United States
HQ
Application security that scales with you. Meet the demands of modern software in a regulated, AI-powered world.
1 open roles 4 posted in 90 days 100% engineering 1-10 est. staff $115k Avg Salary
hires for Backend
800 District Ave. Ste 201 Burlington, MA 01803
Tokyo
Japan
Sales office
REMJP - Remote Japan
8 open roles 10 posted in 90 days 10-50 est. staff $92k Avg Salary
hires for Sales, Support, HR
Bengaluru
India
Engineering / R&D
BANIN - Bangalore
7 open roles 10 posted in 90 days 71% engineering 10-50 est. staff
hires for Backend, QA, Networking
III Block, 4th Floor, No. 9, Hosur Road, Bangalore, Karnataka, India – 560 029
Belfast
United Kingdom
Engineering / R&D
BELUK - Belfast, UK
4 open roles 1 posted in 90 days 100% engineering 10-50 est. staff
hires for Security, Data Science, DevOps
Singapore
Singapore
Sales office
SG - Singapore
3 open roles 3 posted in 90 days 1-10 est. staff
hires for Solutions
5 Temasek Boulevard, #17-01, Suntec Tower 5, Singapore, 038985
Calgary
Canada
Regional office
CALCA - Calgary
1 open roles 3 posted in 90 days 100% engineering 10-50 est. staff $120k Avg Salary
hires for DevOps
707 5th Street SW, Suite 450, Calgary Alberta T2P 1V8
Burlington
Canada
Regional office
BURMA - Burlington
1 open roles 100% engineering 1-10 est. staff $120k Avg Salary
hires for DevOps
Jacksonville
United States
Sales office
REMFL - Remote Florida
1 open roles 1 posted in 90 days 1-10 est. staff $212k Avg Salary
hires for Solutions
Austin
United States
Sales office
REMCO - Remote Colorado
1 open roles 1 posted in 90 days 1-10 est. staff $212k Avg Salary
hires for Solutions
Hong Kong
Hong Kong
Regional office
REMHK - Remote Hong Kong
Atlanta
United States
Regional office
ATLGA - Atlanta
2 Ravinia Drive, Suite 1655, Atlanta GA. 30346
Oulu
Finland
Regional office
OULFI - Oulu, Finland
90100 Oulu
Northport
United States
Regional office
NPTNY - Northport
Republic
United States
Regional office
South Korea
9Floor, 8, Hwangseuel-ro, 214 beon-gil, Bundang-gu, Seongnam-si, Gyeonggi-do, Republic of Korea (13595)
Mountain View
United States
Regional office
California
800 California Street, Suite 300, Mountain View, CA 94041
Shibuya
Japan
Regional office
Japan
39F Shibuya Scramble Square, 2-24-12 Shibuya, Shibuya-ku, Tokyo, 150-6139 Japan
Park
United States
Regional office
Reading
Ground Floor, 1230 Arlington Business Park, Theale, Reading, Berkshire, RG7 4SA
Earlier presence
Chicago, United States
Washington, United States
Toronto, Canada
New York, United States
San Francisco, United States
Jobs
Apply
In office · 1+ year exp · Bengaluru
JavaScript
TypeScript
GCP
Azure
CI/CD
Jenkins
Git
AWS
Management
Confluence
Agile
QA
TestNG
Selenium
Cypress
Apply
≈ $55k – $111k per year (Estimated) · In office · 5+ years exp · France
CI/CD
Apply
Apply
≈ $13k – $42k per year (Estimated) · In office · 8+ years exp · Bachelor's Degree · Bengaluru
Python
CI/CD
Docker
Kubernetes
Linux
Management
Agile
Scrum
QA
Selenium
Postman
Robot Framework
Apply
$54k – $80k per year · In office · Tokyo
Python
JavaScript
Ruby
C#
C++
Perl
Objective-C
CI/CD
Management
Agile
Apply
$45k – $64k per year · In office · 2+ years exp · Bachelor's Degree · Tokyo
Java
SQL
C#
C++
PostgreSQL
DevOps
Kubernetes
Incident Management
Linux
Unix
Apply
≈ $79k – $156k per year (Estimated) · Remote (Canada) · 8+ years exp · Bachelor's Degree · Canada
LLM
DevOps
GCP
Azure
AWS
Cybersecurity
OWASP Top 10
OWASP SAMM
CVSS
Threat Modeling
SBOM
GitGuardian
Management
Jira
Apply
$141k – $212k per year · In office · 8+ years exp · United States
AI Agents
LLM
DevOps
CI/CD
Apply
≈ $92k – $163k per year (Estimated) · Hybrid · Belfast
Python
SQL
GCP
AWS
IAM
Apply
Apply
$141k – $212k per year · In office · 8+ years exp · Austin
AI Agents
LLM
DevOps
CI/CD
Apply
Financials
Total raised
$2M
Latest round
Venture - Series Unknown
Funding rounds
1
Funding rounds
| Round | Announced | Amount | |
|---|---|---|---|
| Venture - Series Unknown | 2019 | $2M | Details |