B

Black Duck

Open source risk management and audits

Regional Field Chief Technology Officer

Full-TimeUpdated on 10/23/2026
No salary listed
Expert
Bachelor's, Master's, MBA
Remote in UK+129 moreMore locations: Remote in Mali | Remote in Cyprus | Remote in Western Sahara | Remote in Finland | Remote in Algeria | Remote in Oman | Remote in Sierra Leone | Remote in Iraq | Remote in Togo | Remote in Botswana | Remote in Poland | Remote in Portugal | Remote in Tanzania | Remote in Russia | Remote in Czechia | Remote in Nigeria | Remote in Benin | Remote in Slovenia | Remote in Saint Helena, Ascension and Tristan da Cunha | Remote in Congo, The Democratic Republic of the | Remote in Lebanon | Remote in Germany | Remote in Cameroon | Remote in Georgia | Remote in Guinea | Remote in Belgium | Remote in North Macedonia | Remote in Madagascar | Remote in Burundi | Remote in Norway | Remote in Slovakia | Remote in Belarus | Remote in Angola | Remote in Turkey | Remote in Ghana | Remote in Iceland | Remote in Réunion | Remote in Monaco | Remote in Kenya | Remote in Mauritania | Remote in Guernsey | Remote in Qatar | Remote in South Africa | Remote in Burkina Faso | Remote in Jersey | Remote in United Arab Emirates | Remote in Azerbaijan | Remote in Namibia | Remote in Tunisia | Remote in Egypt | Remote in Somalia | Remote in Ireland | Remote in Mozambique | Remote in Ukraine | Remote in Greece | Remote in Faroe Islands | Remote in Guinea-Bissau | Remote in South Sudan | Remote in Palestine, State of | Remote in Andorra | Remote in Djibouti | Remote in Armenia | Remote in Seychelles | Remote in Sudan | Remote in Mayotte | Remote in Netherlands | Remote in Eritrea | Remote in Svalbard and Jan Mayen | Remote in Liechtenstein | Remote in Chad | Remote in French Southern Territories | Remote in Equatorial Guinea | Remote in Ethiopia | Remote in Sao Tome and Principe | Remote in Hungary | Remote in San Marino | Remote in Libya | Remote in Israel | Remote in Holy See (Vatican City State) | Remote in Liberia | Remote in Bulgaria | Remote in Jordan | Remote in Iran | Remote in Denmark | Remote in Malta | Remote in Zambia | Remote in Albania | Remote in Yemen | Remote in Bahrain | Remote in Senegal | Remote in Uganda | Remote in Serbia | Remote in Comoros | Remote in Moldova | Remote in Lesotho | Remote in Malawi | Remote in Isle of Man | Remote in British Indian Ocean Territory | Remote in Central African Republic | Remote in Zimbabwe | Remote in Spain | Remote in Eswatini | Remote in Luxembourg | Remote in Côte d'Ivoire | Remote in Cabo Verde | Remote in Sweden | Remote in Niger | Remote in Rwanda | Remote in Switzerland | Remote in Åland Islands | Remote in Gibraltar | Remote in Croatia | Remote in Gabon | Remote in Congo | Remote in Montenegro | Remote in Romania | Remote in Kuwait | Remote in Mauritius | Remote in Latvia | Remote in Bosnia and Herzegovina | Remote in Saudi Arabia | Remote in Gambia | Remote in Austria | Remote in Morocco | Remote in Italy | Remote in Lithuania | Remote in Estonia | Remote in France | Remote in Syria
RemoteRemote within EMEA; travel up to 50% to customer sites and industry events.
Solution EngineeringPre-Sales Solution Engineering

About the job

Requirements
  • At least 15 years in a senior technical leadership role such as CTO, Sales Engineering leader, Principal Architect, or equivalent, including several years in customer-facing or field/pre-sales work.
  • A proven track record engaging and influencing C-level and senior technical audiences at enterprise organizations, with demonstrated success across complex enterprise sales cycles.
  • Domain expertise in application security (SAST, SCA, and DAST), enterprise architecture, cloud/SaaS platforms, APIs and integrations, and security best practices.
  • Deep practical understanding of AI and machine-learning concepts applied to security, including anomaly detection, large language models, behavioral analytics, AI-assisted software development, and agentic workflows, as well as their limitations and responsible-adoption controls.
  • Demonstrated success negotiating with and influencing executive leadership, significant customers, partners, analysts, or vendors to shape technical decisions and business outcomes.
  • Ability to exercise wide latitude in determining objectives and approaches for complex, critical assignments with material regional, functional, or market impact.
  • Experience shaping standards, methods, practices, or market-facing technical narratives within an industry or discipline.
  • Ability to translate complex technical concepts into clear narratives for executive and highly technical audiences, including customers, partners, press, analysts, and internal stakeholders.
  • Demonstrated industry presence through conference speaking, published thought leadership, active contribution to industry or analyst communities, customer advisory leadership, or comparable external technical influence.
  • Exceptional written and verbal communication skills to translate complex technical concepts for technical and executive audiences.
  • Willingness and ability to travel up to 50% to customer sites and industry events.
  • A bachelor's degree in Computer Science, Engineering, Cybersecurity, or a related field, or equivalent practical experience.
Responsibilities
  • Serve as a trusted technical advisor and recurring executive sponsor for C-level and senior technical stakeholders at strategic, enterprise, federal, and other key accounts, moving between business strategy, risk, compliance, and technical architecture discussions.
  • Lead high-visibility, multidisciplinary technical engagements across the region, including executive briefings, architecture reviews, whiteboard sessions, customer advisory feedback loops, and partner- or analyst-facing discussions.
  • Represent Black Duck as a technical evangelist for its platform and roadmap within the region by delivering keynotes, webinars, whitepapers, and thought leadership at industry events, and representing the company with press, analysts, and partners.
  • Translate platform AI/ML, detection engine, and architecture capabilities into credible narratives for technical and executive audiences, addressing responsible AI practices such as data privacy, model governance, and human-in-the-loop controls.
  • Partner with Sales and Presales leadership on strategic enterprise opportunities, leading technical deep-dives, architecture reviews, whiteboard sessions, and executive briefings, and advising on technical implications of product launches, roadmap changes, and competitive positioning.
  • Support RFPs and security questionnaires with authoritative technical input and explain competitive and technical differentiation, including comparisons of AI/ML capabilities.
  • Engage strategic accounts to strengthen technical trust, identify expansion opportunities, mitigate renewal risk, and guide customers toward secure software development and application security maturity.
  • Solve problems of strategic or industry scope using innovative approaches to remove technical barriers, strengthen customer confidence, and improve business outcomes.
  • Provide field-informed guidance on AI-assisted software development, agentic workflows, application security trends, and competitive market dynamics that may affect company strategy or customer adoption.
  • Systematically capture, synthesize, and escalate regional customer, partner, and market feedback into actionable input for Product, Engineering, and Sales, including technical objections and input affecting roadmap, packaging, launch readiness, and go-to-market strategy.
  • Coach, enable, and review technical storytelling by sales engineers and account executives, including accurate explanations of AI features.
Desired Qualifications
  • An MBA or other advanced degree.

About the company

Black Duck Software helps organizations manage open source risk by offering Software Composition Analysis (SCA) and Open Source Audits. Its products scan software to find security vulnerabilities and license compliance issues in open source components and provide fixes. The Open Source Audits support due diligence for mergers and acquisitions and internal audits. Revenue comes from licenses for the tools plus professional services for audits and consultations. The platform relies on a large database of open source components, vulnerabilities, and licenses to enable fast, accurate analysis. The goal is to help security, development, and legal teams ensure software is secure and legally compliant throughout the software development lifecycle and during M&A.

Company Size

1,001-5,000

Company Stage

Acquired

Total Funding

$87.5M

Headquarters

Burlington, Massachusetts

Founded

2002

Get referred to Black Duck

See people who can refer or advise you

Simplify Jobs

Simplify's Take

What believers are saying

  • Polaris scan volumes rose over 100% in early 2026, signaling demand acceleration.
  • CRA deadlines beginning September 11, 2026 expand Black Duck’s compliance-selling window.
  • The 2026 OSSRA report showed 107% higher vulnerabilities per codebase, boosting urgency.

What critics are saying

  • Aikido, Snyk, and GitHub Advanced Security commoditize Black Duck’s developer workflows by 2026.
  • Black Duck still carries legacy on-prem complexity, slowing wins against faster SaaS competitors.
  • If AI-native rivals own open-source governance, Clearlake and Francisco Partners face a stranded asset.

What makes Black Duck unique

  • Black Duck’s 2026 Gartner Leader status validates its enterprise supply-chain security depth.
  • Its BDSA enrichment offsets NIST’s April 2026 NVD deprioritization.
  • ContextAI and Signal fuse deterministic analysis with AI governance for regulated codebases.

Help us improve and share your feedback! Did you find this helpful?

Benefits

  • Health Insurance
  • Dental Insurance
  • Vision Insurance
  • Flexible Work Hours
  • Professional Development Budget
  • Paid Vacation

Growth & Insights and Company News

6 month growth

-1%

1 year growth

-3%

2 year growth

47%
PR Newswire
Sep 8th, 2026
Black Duck joins Anthropic's Project Glasswing to secure critical software with AI

Black Duck has joined Anthropic's Project Glasswing, an industry initiative aimed at securing critical software infrastructure using advanced AI for defensive cybersecurity. The application security company will apply Mythos, Anthropic's AI system, across its full security portfolio. This will combine AI-accelerated vulnerability discovery with remediation workflows, risk-based prioritisation, and compliance-driven governance. "AI is transforming the economics and speed of vulnerability discovery and exploit development," said Dipto Chakravarty, Black Duck's Chief Product & Technology Officer. He explained that pairing Mythos with Black Duck's existing capabilities will enable faster risk reduction whilst maintaining the transparency and auditability required by enterprise security teams. Black Duck specialises in application security, combining deterministic analysis with AI reasoning to identify and fix security issues in code written by developers, generated by AI, or assembled from open source.

PR Newswire
Jul 14th, 2026
Black Duck launches AI-powered Coverity with EU CRA compliance features

Black Duck has launched new AI-powered features for its Coverity static analysis solution, designed to support modern development workflows and emerging regulatory compliance requirements. The updates include AI-assisted vulnerability triage, support for the EU Cyber Resilience Act (CRA), and analysis capabilities for Rust 1.92. Coverity's AI features run on customers' own large language models, allowing organisations to maintain control over code and scan data processing — a requirement for regulated industries with strict data governance policies. The solution now offers streamlined navigation and improved issue filtering to help teams manage large volumes of security findings more efficiently. According to Chief Product & Technology Officer Dipto Chakravarty, the enhancements combine deterministic precision with AI speed whilst maintaining auditability. All announced capabilities are now generally available for customer deployment. Existing Coverity customers receive these AI-powered features whilst retaining the deterministic, auditable scan results required by regulated industries.

PR Newswire
Jun 16th, 2026
Black Duck launches AI-powered security tools to combat surge in software vulnerabilities

Black Duck has announced significant enhancements to its Polaris Platform, designed to help organisations defend against AI-driven cyberattacks and manage the surge in supply chain vulnerabilities. The updates focus on three areas: eliminating application security testing gaps, preparing for increased vulnerability disclosures, and automating remediation pipelines. The enhancements address threats from sophisticated AI models that enable attackers to exploit multiple vulnerabilities rapidly. Polaris scan volumes have increased over 100% in the first five months of 2026 as organisations accelerate security testing. New capabilities include improved vulnerability detection, rapid response tools for supply chain components, and AI-enabled application security features. Black Duck expects vulnerability disclosures to exceed 50,000 in 2026, potentially reaching 200,000 by 2028, as maintainers use AI to identify and patch security flaws.

PR Newswire
Mar 23rd, 2026
Black Duck launches Signal, AI-powered security solution for AI-generated code

Black Duck has launched Signal, an AI-powered application security solution designed to secure AI-generated code in autonomous development workflows. The platform uses an agentic AI architecture where specialised agents analyse vulnerabilities, validate exploitability and recommend fixes. Signal is powered by ContextAI, Black Duck's application security model containing over 20 years of security intelligence. This enables the system to assess risk with higher accuracy than solutions built solely on general-purpose AI models. The platform integrates directly into modern software development through model context protocol and APIs that support AI coding assistants and automated pipelines. CEO Jason Schmitt said AI is "actively authoring software", and Signal brings intelligence and governance to that reality. The solution is now generally available and will be showcased at RSA Conference in San Francisco from 23–26 May.

PR Newswire
Feb 12th, 2026
Black Duck expands Polaris integrations for automated DevSecOps across GitHub, GitLab, Azure DevOps, and Bitbucket

Black Duck has launched enhanced integrations for its Polaris Platform across major source code management systems including GitHub, GitLab, Azure DevOps and Bitbucket. The updates enable automated repository onboarding, continuous monitoring and event-based scanning for enterprises managing thousands of code repositories. The enhancements allow organisations to automatically onboard repositories without manual configuration and trigger scans during pull requests. The platform includes Black Duck Signal for AI-powered security insights and Code Sight, an IDE plugin providing real-time feedback to developers. The integrations support customisable scanning options and automatically synchronise security policies and user access controls across repositories. The features are immediately available to existing customers through Polaris Platform settings, aiming to streamline DevSecOps operations at enterprise scale.