Black Duck Software, Inc. helps organizations build secure, high-quality software, minimizing risks while maximizing speed and productivity. Black Duck, a recognized pioneer in application security, provides SAST, SCA, and DAST solutions that enable teams to quickly find and fix vulnerabilities and defects in proprietary code, open source components, and application behavior. With a combination of industry-leading tools, services, and expertise, only Black Duck helps organizations maximize security and quality in DevSecOps and throughout the software development life cycle.
Black Duck, a Leader in the Gartner Magic Quadrant for Application Security Testing, is hiring a Technical Success Manager (TSM) to drive adoption and prove the value of our solutions across our enterprise customers. TSMs are hands-on technologists who configure and tune our solutions and show measurable software risk reduction to customer security, engineering, and executive teams.
The Role
Your job is to drive adoption and prove value. You work closely with the account team to drive renewals and delight customers. You do the technical work yourself, including problems without a known answer. You partner with a Customer Success Engineer (CSE) when the work requires custom code, CI/CD or API integration builds, or architecture judgment specific to the customer's environment.
What You'll Do
Technical ownership
• Drive adoption across customer development teams after onboarding, expanding coverage to new teams, repositories, and use cases.
• Configure and tune the platform: scan policies and rules, scan and server performance, standard SSO setup, and custom reports and dashboards.
• Guide vulnerability remediation and prioritization using CVE, CWE, and OWASP context.
• Support SBOM generation and review (CycloneDX, SPDX) and open source risk questions.
• Troubleshoot technical issues directly and coordinate first line triage with Support and Engineering through resolution.
• Enable customer teams on scanning, UI and CLI usage, problem diagnosis, and best practices, and develop internal champions.
Adoption, value, and renewals
• Confirm why the customer bought, then build and maintain a success plan with measurable adoption and technical outcomes.
• Build working relationships with AppSec, engineering, and executive stakeholders, and know who has influence over adoption.
• Participate in Executive Business Reviews, highlighting the progress you and the customer have made and proving value.
• Monitor adoption and customer health, flag risk early, and partner with the account team on save plans.
• Work closely with the account team to drive renewals by supplying the technical value story and proof points.
• Identify expansion opportunities and hand them to Sales with a validated technical case. You do not carry a quota.
• Advocate for customers internally, feed field gaps back to Product and Engineering, and turn successful customers into references.
You'll Have
• 5+ years in a customer-facing technical role such as TAM, sales engineer, solutions architect, or implementation consultant.
• Hands-on experience with SAST, SCA, and DAST: running scans, tuning results, and triaging findings yourself.
• Strong knowledge of application security, vulnerabilities, and open source licensing.
• Hands-on experience with CI/CD and DevOps tooling such as GitHub, GitLab, Azure DevOps, and Jenkins.
• Software development experience in C/C++, Java, C#, or similar, plus comfort with scripting and REST APIs.
• A track record driving adoption and proving value across a portfolio of enterprise accounts, working alongside account teams on renewals.
• Practical fluency using AI tools to accelerate technical analysis, troubleshooting, and customer communication.
• Ability to travel up to 25%.
• Bachelor's degree in Computer Science, Engineering, or a related STEM field, or equivalent practical experience.
Preferred
• TAM, solutions architect, or sales engineer experience in AppSec or DevSecOps.
• Security certifications such as CSSLP, CISSP, or CEH.
• Experience with enterprise-scale web development, microservices, and containers.
• Experience with regulated environments and standards such as PCI DSS, ISO 26262, MISRA, AUTOSAR, or DISA STIG.
Black Duck is an equal opportunity employer. We consider all applicants for employment without regard to race, color, national origin, religion, sex, gender identity or expression, age, disability, sexual orientation, veteran or military service status, or any other characteristic protected by applicable law. Black Duck complies with all applicable laws prohibiting employment discrimination in every jurisdiction where it operates and provides reasonable accommodations to individuals with disabilities in accordance with applicable law.