Experienced AppSec Analyst

Who are we?

Checkmarx is the enterprise application security leader and the host of Checkmarx One™ — the industry-leading cloud-native AppSec platform that helps enterprises build #DevSecTrust.

Powered by the intelligence from our industry-leading AppSec security research team, and our AI-driven technology and services, our platform is designed to enable CISOs, AppSec and development leaders to prioritize their teams’ focus on what impacts their business.

Our offerings secure every phase of development for every application, from the very first line of code through production, while simultaneously balancing the dynamic needs of security and development teams.

We are honored to serve more than 1,800 customers, which includes 60 percent of all Fortune 100 organizations. We are committed to moving forward with the unwavering dedication to the safety and security of our customers, and the applications that power our day-to-day lives.

What are we looking for?

The Checkmarx Security Research group seeks an experienced, detail-oriented AppSec Analyst to join our team. Your role will include in-depth analysis of open-source vulnerabilities and supervising the technical components and collaboration of an analysts team. Additionally, you will enhance our work by creating scripts, researching and supporting the development of new security features, identifying 0-day vulnerabilities, and keeping up-to-date with the latest Application Security trends.

You will collaborate with Product, R&D teams, and AppSec researchers.

If you are passionate about security and enthusiastic about product-related matters and technical management - we are looking for you!

How will you make an impact?

• Conduct vulnerability analysis of known open-source software vulnerabilities to identify affected libraries and other elements such as the affected vulnerable code. Analyze code containing various vulnerabilities written in multiple languages.
• Perform security code review and analysis of results produced by Checkmark’s AST solutions.
• Supervise the technical components and collaboration of an analysts team.
• Engage in productive interactions with product and R&D teams to align the security aspect of new features and product enhancements.
• Research ways to improve internal processes and product features.
• Be at the forefront of the Application Security world: Discover and report Application Security trends. Write publications on new vulnerabilities and hot topics.
• Develop Python scripts and tools for research purposes and automation.
• Research and discover 0-day vulnerabilities in open-source libraries.

What is needed to succeed?

• Passionate about security and keen on growing in the security field.
• 1-2 years of experience as an analyst or researcher.
• 1-2 years of experience in a similar role in the security field.
• Familiar with key AppSec concepts, such as understanding security concepts, vulnerabilities, and secure coding practices.
• Have a deep understanding of the OWASP top 10.
• Experience with Python scripting/programming.
• Familiarity with both interpreted and compiled languages and ability to learn new programming languages and technologies independently.
• Basic experience in conducting security research, bug bounties, and pen-testing.
• Excellent writing and oral presentation skills in English.
• Ability to handle multiple requests and work in a fast-paced environment.
• Excellent organizational, interpersonal, and communication skills. The ability to innovate, think creatively, and pay close attention to details is essential in this position.
• A degree or certification in a relevant field - an advantage

Checkmarx offers a great work environment, professional development, challenging careers, competitive compensation, great work-life balance, as well as great benefits and perks throughout the year. Checkmarx is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, national or ethnic origin, sex, sexual orientation, gender identity or expression, age, disability, or other characteristics protected by law.