Dom Glavach

Dom Glavach is the Chief Information Security Officer (CISO) of Black Duck, appointed in April 2026. In the role, he leads Black Duck's global security strategy, overseeing enterprise security, governance, risk and compliance, and product security as the company expands its portfolio for securing modern and AI-driven software development.

Career path

Before joining Black Duck, Glavach served as Chief Information Security Officer and Chief Security Strategist at CyberSN, where he led enterprise security strategy and operations across a fully remote workforce, integrating governance, risk and compliance with security operations, vulnerability management, and secure product development. In that role he was responsible for the company's information security strategy, policy, IT operations, security engineering, security operations, data privacy, and cyber threat detection.

Before CyberSN, Glavach spent two decades with Concurrent Technologies Corporation (CTC), including serving as CISO for a top-100 Department of Defense contractor and as a research fellow. He also served at CTC as principal cybersecurity and information security engineer for various projects. At CTC, he architected and led compliance programs aligned with FedRAMP, DFARS, NIST 800-171, and CMMC, and directed incident response efforts against nation-state adversaries, work that supported tens of millions of dollars in secured government contracts.

Remit at Black Duck

At Black Duck, Glavach leads security strategy across enterprise security, GRC, product security, and AI security and governance. He works closely with engineering, product, and customer-facing teams to embed security, resilience, and responsible AI governance throughout the company's operations and the platforms delivered to customers. "Black Duck sits at the center of how modern software is built and secured," said Dom Glavach, CISO of Black Duck.

Teaching, credentials, and public talks

Glavach is the author of the CyberSN Job Taxonomy and serves as an Adjunct Professor of Cybersecurity at Indiana University of Pennsylvania. He is described as a frequent speaker on topics including AI-enabled defense, cyber workforce risk, and modern CISO leadership. On October 31, 2023, he presented at IUP's Cyber Security Day on Clean Up on Aisle 4: Active Cyber Defenses. He holds the CISSP credential, is an active member of the Armed Forces Communications and Electronics Association Cyber Committee, and chairs its subcommittee on Vehicle and Embedded Systems Cyber Security. He has presented on security topics to public and government audiences, including the National Institute of Standards and Technology and the National Security Agency.