Checkmarx Security Scanning SME
Core
Subject matter expert for application security initiatives, analyzing Checkmarx scan results and recommending remediation strategies.
Role type
Senior IC application security engineer (SAST)
Builds
Vulnerability management programs and secure coding practices
Domain
Application security / DevSecOps
Deliverable
dashboards & analysis
Required skills
Checkmarx, SAST methodologies, vulnerability management, secure coding (Java, .NET, Python), CI/CD, DevSecOps
Preferred skills
Checkmarx One, Checkmarx SAST platforms, CSSLP, CISSP, Veracode, Fortify, SonarQube, Snyk
Technologies
Checkmarx, CI/CD, DevSecOps, Java, Python, ASP.NET
Responsibilities
Analyze Checkmarx scan results and recommend remediation strategies, Support vulnerability triage, prioritization, and risk assessment, Collaborate with application development, DevSecOps, and security teams, Establish best practices for SAST use and secure coding, Help tune policies and optimize rules while reducing false positives, Create dashboards, reports, and vulnerability metrics for leadership
Seniority
Senior, hands-on IC
