Application Security Analyst

Checkmarx; Pune District; On-site; INR 957,854 - 1,436,781; Full time

Job summary

Checkmarx, located in Pune District, India, seeks a skilled security analyst to perform in-depth analyses of malicious code and open-source packages. You will evaluate security tools and develop scripts in Python for analysis, collaborating closely with the research team.

The role requires 2–3 years of experience, a deep understanding of malicious code patterns, and fluency in English. Preferred qualifications include knowledge of reverse engineering and supply-chain attack techniques.

Qualifications

• 2–3 years of professional experience in malicious code analysis or security research.
• Strong understanding of malicious code patterns.
• Experience using Python for analysis or automation.

Responsibilities

• Perform in-depth analysis of open-source packages to identify malicious behavior.
• Analyze source code across multiple programming languages.
• Investigate obfuscation and suspicious execution flows.

Skills

Malicious code analysis

Python

Attention to detail

Supply-chain attack techniques

Learning new technologies

Interpreted and compiled languages

Job description

Checkmarx is the leader in application security and ensures that enterprises worldwide can secure their application development from code to cloud. Our consolidated platform and services address the needs of enterprises by improving security and reducing TCO, while simultaneously building trust between AppSec, developers, and CISOs. At Checkmarx, we believe it’s not just about finding and remediating risk across the entire application footprint and software supply chain with one seamless process for all relevant stakeholders. We serve more than 1,800 customers, including 40 percent of all Fortune 100 companies such as Siemens, Airbus, SalesForce, Stellantis, Adidas, Wal‑Mart, and Sanofi.

What You’ll Do

• Perform in-depth analysis of open-source packages to identify malicious behavior
• Analyze source code across multiple programming languages
• Investigate obfuscation, suspicious execution flows, and hidden payloads
• Evaluate and validate detections from security tools
• Develop scripts and internal tools primarily in Python to support analysis
• Collaborate with the SCS research team and other security teams in the group

Requirements

• 2–3 years of professional experience in malicious code analysis or security research
• Strong understanding of malicious code patterns and supply‑chain attack techniques
• Experience using Python for analysis or automation
• Familiarity with both interpreted and compiled languages
• Ability to independently learn new technologies
• High attention to detail
• Fluent English

Advantage

• Reverse engineering