Dom Glavach

Black Duck named Dom Glavach as CISO. Glavach most recently served as CISO and Chief Security Strategist at CyberSN, and previously held CISO roles through Concurrent Technologies Corporation.

According to the company, Glavach will lead Black Duck's global security strategy, with oversight of product security, enterprise security, and governance, risk and compliance. According to the release, Glavach will partner with customer-facing, product and engineering teams so that security is built into both Black Duck's internal operations and the platforms and intelligence it delivers to customers.

Glavach has more than 20 years of cybersecurity leadership experience across regulated industries, national defense environments and high-growth SaaS organizations, the release says. According to the release, at CyberSN Glavach ran enterprise security strategy and operations for a fully remote workforce, combining security operations, vulnerability management and secure product development with governance, risk, and compliance. The release says Glavach spent two decades with Concurrent Technologies Corporation, a period that included serving as CISO to a Department of Defense contractor. The release says Glavach architected and led compliance programs aligned with CMMC, NIST 800-171, DFARS and FedRAMP for the Department of Defense contractor. According to the release, he also directed incident response against advanced, nation-state adversaries, work it says supported secured government contracts worth tens of millions of dollars. Black Duck said Glavach wrote the CyberSN Job Taxonomy and that, at the time of the announcement, he taught at Indiana University of Pennsylvania as an Adjunct Professor of Cybersecurity.

The company says it addresses the board-level risks of modern software through its True Scale Application Security offering. According to the company, Glavach takes the role as Black Duck continues to expand its portfolio for securing AI-driven and modern software development. According to the release, Glavach takes up the CISO role amid open source compromises and software supply chain breaches affecting AI-driven systems, cloud platforms and developer tools.