Senior Application Security Engineer

Key Responsibilities

• Act as the Checkmarx SME for application security initiatives.
• Review and analyze Checkmarx scan results and recommend remediation strategies.
• Support vulnerability triage, prioritization, and risk assessment activities.
• Work closely with application development, DevSecOps, and security teams.
• Establish best practices for SAST usage and secure coding.
• Assist in policy tuning, rule optimization, and false positive reduction.
• Provide guidance on integrating Checkmarx into SDLC and CI/CD pipelines.
• Support audits, security assessments, and compliance initiatives.
• Create dashboards, reports, and vulnerability metrics for leadership.

Required Qualifications

• 8+ years of Application Security experience.
• 5+ years of hands-on experience with Checkmarx.
• Strong understanding of SAST methodologies.
• Experience supporting vulnerability management programs.
• Knowledge of secure coding practices across Java, .NET, Python, or similar technologies.
• Experience working with CI/CD tools and DevSecOps processes.
• Strong stakeholder communication skills.

Preferred Qualifications

• Experience with Checkmarx One or Checkmarx SAST platforms.
• Security certifications such as CSSLP, CISSP, Security+, or similar.
• Experience with additional security tools such as Veracode, Fortify, SonarQube, or Snyk.