Application Security Analyst

Checkmarx; Lisboa; Presencial; EUR 40 000 - 55 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Benefícios competitivos

Equilíbrio entre vida profissional e o

Desenvolvimento profissional

Resumo da oferta

A Checkmarx procura um Analista de Segurança de Aplicações para se juntar à equipa em Braga. O papel envolve compreensão aprofundada de vulnerabilidades em código, desde bibliotecas de código aberto até código proprietário, com envolvimento no grupo de pesquisa de segurança.

Serás exposto à família de produtos SAST, DAST, SCA, KICS e outros, ganhando proficiência em análise de código seguro. A tua contribuição será essencial para melhorar os motores e entregar resultados mais precisos, com

Qualificações

• Paixão por segurança e desejo de evoluir na área.
• 3–4 anos de experiência como analista ou pesquisador, incluindo revisão de código seguro.
• 3–4 anos em papel similar no campo de segurança.
• Boas competências analíticas.
• Conhecimento de conceitos de AppSec, vulnerabilidades e práticas de codificação segura.
• Compreensão aprofundada do OWASP Top 10 ou equivalente.
• Experiência com Python ou linguagens semelhantes.
• Familiaridade com linguagens interpretadas e compiladas e capacidade de aprender novas tecnologias.
• Experiência básica em pesquisa de segurança, bug bounty e pentest.
• Excelentes habilidades de redação e apresentação em inglês.
• Resiliência e capacidade de lidar com várias solicitações em ambiente acelerado.
• Excelentes habilidades organizacionais, de relacionamento e comunicação.
• Doutro em área relevante ou certificação é uma vantagem.

Responsabilidades

• Contribuir para melhorar os motores de detecção e entregar resultados mais precisos.
• Automatizar processos internos com scripting e IA para apoiar novos recursos de produtos.
• Colaborar com as equipas de Produto, R&D e outras para reforçar a segurança de aplicações.

Conhecimentos

Python scripting

OWASP Top 10

Secure code reviewing

English writing

Analytical skills

Formação académica

Bacharelado/licenciatura em área relevante

Ferramentas

SAST

DAST

SCA

KICS

Descrição da oferta de emprego

Descrição do cargo

Description Who are we? Checkmarx is the leader in application security, ensuring that enterprises worldwide can secure their application development from code to cloud. Our consolidated platform and services address the needs of enterprises by improving security and reducing TCO, while simultaneously building trust between AppSec, developers, and CISOs. At Checkmarx, we believe it's not just about finding risk, but remediating it across the entire application footprint and software supply chain with one seamless process for all relevant stakeholders. We are honored to serve more than 1,800 customers, including 40 percent of all Fortune 100 companies, such as Siemens, Airbus, Salesforce, Stellantis, Adidas, Walmart, and Sanofi.

Application Security Analyst

to join our team in Braga. Your role will include an in‑depth understanding of vulnerabilities and how they occur in the code, from open‑source libraries to proprietary code, and involvement with the entire security research group.

On the one hand, you will become familiar with our family of security products, such as SAST, DAST, SCA, KICS, and others, while gaining proficiency in secure code analysis. Your contribution will be essential to improving our engines and delivering more accurate results. On the other hand, your work can include scripting and leveraging AI to automate and improve internal processes, helping support new product features, and staying up to date with the latest Application Security trends.

Apart from the Security Research group, you will collaborate with multiple teams, including Product Management, R&D, and others.

If you are passionate about application security and eager to take Checkmarx products to the next level, we are looking for you!

Requirements

• Passionate about security and keen on growing in the security field.
• 3-4 years of experience as an analyst or researcher, including secure code reviewing.
• 3-4 years of experience in a similar role in the security field.
• Good analytical skills.
• Familiar with key AppSec concepts, such as understanding security concepts, vulnerabilities, and secure coding practices.
• Have a deep understanding of the OWASP Top 10 or similar.
• Experience with Python scripting/programming or similar languages.
• Familiarity with both interpreted and compiled languages and the ability to learn new programming languages and technologies independently.
• Basic experience in conducting security research, bug bounties, and Pentesting.
• Excellent writing and oral presentation skills in English.
• Resiliency and the ability to handle multiple requests and work in a fast‑paced environment.
• Excellent organizational, interpersonal, and communication skills. The ability to innovate, think creatively, and pay close attention to details is essential in this position.
• Customer‑oriented mindset and driven by innovation.
• A degree or certification in a relevant field – an advantage.

What we have to offer Checkmarx offers a great work environment, professional development, challenging careers, competitive compensation, great work‑life balance, as well as great benefits and perks throughout the year.

Checkmarx is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, national or ethnic origin, gender, sexual orientation, gender identity or expression, age, disability, or other characteristics protected by law.