Secure SDLC & Vulnerability Lead

Lessor Group; Lillerød; On-site; DKK 522,388 - 820,895; Full time

Job summary

Paychex Europe is seeking a technically focused Application Security Specialist to join our security team of five, with a primary focus on secure development lifecycle and vulnerability management. You will work with software development teams to identify, analyze, calibrate, prioritize, and drive remediation of security vulnerabilities across our commercial products.

You will strengthen secure software development practices using Checkmarx, OWASP frameworks, and risk-based vulnerability

Qualifications

• Bachelor’s or Master’s degree in Cybersecurity, Information Security, Computer Science, Software Engineering, or related field (or equivalent practical experience).
• Hands-on experience with application security, secure coding, vulnerability assessment, SAST technologies, and security risk analysis within a modern software development environment.
• Strong understanding of vulnerability management principles, lifecycle management, and remediation processes.
• Hands-on experience with Checkmarx or other SAST platforms.
• Experience with vulnerability scoring and risk assessment frameworks such as CVSS.
• Understanding of vulnerability triage, calibration, false-positive analysis, and risk-based prioritization methodologies.
• Familiarity with CIS controls and secure software development practices.
• Strong analytical, documentation, and reporting skills.
• Ability to communicate technical security findings to both technical and non-technical stakeholders.

Responsibilities

• Perform technical review, triage, and calibration of vulnerability findings from SAST, SCA and container scans.
• Analyze Checkmarx findings to distinguish true positives from false positives and ensure accurate vulnerability classification.
• Assess vulnerabilities using CVSS, exploitability, business impact, and environmental context to determine risk ratings and remediation priorities.
• Partner with development teams to identify root causes of security vulnerabilities and provide remediation guidance aligned with secure coding best practices.
• Promote secure development practices based on OWASP Top 10, OWASP ASVS, CWE, and secure coding standards.
• Contribute to AI-assisted workflows for vulnerability detection, analysis, prioritization, and remediation recommendations.
• Develop and maintain vulnerability metrics, remediation dashboards, risk reporting, and executive-level security reporting.
• Maintain evidence, audit trails, and documentation supporting security assessments, remediation activities, and compliance initiatives.

Skills

Application security

Vulnerability assessment

SAST

Checkmarx

Risk-based prioritization

Secure coding practices

CVSS

Security standards

Education

Bachelor’s or Master’s in Cybersecurity/Info Security/CS/SE

Tools

Checkmarx

Job description

Paychex Europe is seeking a technically focused Application Security Specialist to join our security team of five, with a primary focus on secure development lifecycle and vulnerability management. You will work with software development teams to identify, analyze, calibrate, prioritize, and drive remediation of security vulnerabilities across our commercial products.

You will strengthen secure software development practices using Checkmarx, OWASP frameworks, and risk-based vulnerability