Security software companies · Application security testing (SAST, SCA, DAST)
Black Duck
About Black Duck
Black Duck sells application security testing to software teams: static analysis of proprietary code (SAST), software composition analysis of open source components (SCA) and dynamic testing of running applications (DAST), alongside related services. Its own security team lists three of the company's 35 postings: a Lead Product Security role, remote within Canada, and a Senior Security Architect and a Senior Vulnerability Manager, both based at the Belfast office in Northern Ireland, with no remote option stated.
From its own postings
, CyberJobs.cc shows 3 security openings at Black Duck, 1 of which name a salary range.
Black Duck security openings
Read 12 Nov 2026, 22:26 UTCComparable openings elsewhere
The same specialty at other employers.
Cyber Threat Intelligence SME (shows the role here)
micro1 · Threat Intel & Research · Remote· 2w agoDetails
$70–$110/hr
Application Security Engineer – CVE & Vulnerability Research (shows the role here)
Anyone AI · Offensive Security · Remote· 1mo agoDetails
$65/hrBackend Security Engineer (shows the role here)
micro1 · Security Engineering · Remote· 1mo agoDetails
$30–$100/hr- $40–$80/hr
Some of these links can earn us a fee from the employer or partner; the salary you are offered is the same either way.
- CAD 117,000–150,000/yr
Senior Vulnerability Manager (shows the role here)
Leadership · BELUK - Belfast, UK· 4mo agoDetails
Senior Security Architect (shows the role here)
Architecture & Consulting · Belfast; Calgary· 4mo agoDetails
A few links on CyberJobs.cc are referral links: when one leads to a hire, a sign-up or a purchase (a lab, a course or a tool marked Partner), the company behind it may pay CyberJobs.cc a fee. You pay nothing extra, and it never changes the salary an employer offers you or which roles the board lists.
Black Duck roles, country by country
Where Black Duck takes applicants, with the number of open roles for each country.
Did Black Duck really write to you?
Genuine Black Duck pages sit on blackduck.com · job-boards.greenhouse.io/blackduck · boards.greenhouse.io/blackduck. Drop a recruiter's message into the checker and it tests each link, the sender's address and the salary against these.
Hear first when Black Duck posts a security role
We read Black Duck's careers system around the clock and send its new security roles in a weekly email, along with comparable openings at other employers. Free; leave whenever you like.
Working at Black Duck
Black Duck dates to 2002; Synopsys owned it from 2017 until Clearlake Capital and Francisco Partners bought the business in October 2024. Headquarters are in Burlington, Massachusetts. Its security postings state Stated per posting (from its own postings).
3 security roles open at the last read3 open roles at Black Duck, confirmed on its careers system 12 Nov 2026.
Internal security team jobs: one remote in Canada, two on site in Belfast.
Belfast, in the UK, holds two of the three roles on site; the product security lead is the only remote one, open across Canada.
Honest catches
- The salary note here is from its own postings rather than read from current postings, so use it as a guide, not as an offer.
Salaries at Black Duck
From its own postings · as of 2026-11-11Recorded salary note, from its own postings, dated 2026-11-11
Only the Canadian product security lead posts a range, CAD 117,000 to 150,000 a year (12 Nov 2026); the two Belfast jobs leave pay out.
1 of its 3 open roles give a salary, not enough to call any figure typical of Black Duck, so the note above stands. By specialty:
| Kind of work | Open roles | Rates stated | Highest rate |
|---|---|---|---|
| AppSec | 1 | No rate stated | None stated |
| Architecture & Consulting | 1 | No rate stated | None stated |
| Leadership | 1 | No rate stated | None stated |
Specialties Black Duck hires in
Open a specialty for its day-to-day work, the other employers hiring for it and its salary band.
Moving into security? The career guides explain each specialty, and the salary pages set employers side by side.
From the forum
Nobody has posted about Black Duck yet. Open the thread you wish existed.
Black Duck: common questions
What salary does Black Duck offer security staff?
Stated per posting. Only the Canadian product security lead posts a range, CAD 117,000 to 150,000 a year (12 Nov 2026); the two Belfast jobs leave pay out.
What sort of company is Black Duck?
Black Duck dates to 2002; Synopsys owned it from 2017 until Clearlake Capital and Francisco Partners bought the business in October 2024. Headquarters are in Burlington, Massachusetts.
What is it like to work in security at Black Duck?
Its security postings state Stated per posting (from its own postings). As a security vendor, it hires both defenders for its own estate and specialists who build and sell the product.
What kind of employment are Black Duck's security roles?
Internal security team jobs: one remote in Canada, two on site in Belfast.
Where are Black Duck's security jobs based?
Belfast, in the UK, holds two of the three roles on site; the product security lead is the only remote one, open across Canada.
Other employers to weigh up
Sysdig secures containers, Kubernetes and cloud workloads at runtime; its open security roles lead the company's own security engineering and research.
No salary in its postingsFrom its own postings
Semgrep makes fast, rule-based static analysis and supply chain scanning; its open security role leads engineers building supply chain security.
No salary in its postingsFrom its own postings
Horizon3.ai sells NodeZero, which runs autonomous penetration tests against real networks; its engineers build that attack capability and research the threats it emulates.
$218k–$300k/yrLive salary band
Sells workforce and customer identity through Okta and Auth0; security staff build identity threat protection, run PSIRT and test the product offensively.
$207k–$293k/yrLive salary bandListed by the expected value of applying, with a small lift for employers that pay us a referral fee; that lift never touches a salary figure.
Recruiting security staff like Black Duck's? We source the candidates (you make the hire).