Senior Application Security Researcher - AI & App Security

Checkmarx Ltd.; Braga; Híbrido; EUR 60 000 - 80 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Competitive compensation

Professional development

Great work-life balance

Challenging careers

Resumo da oferta

Checkmarx Ltd. is seeking an experienced Application Security Researcher to join their Security Research team in Braga, Portugal. The role involves researching application security, analyzing vulnerabilities, and translating findings to enhance Checkmarx’s AST products including SAST, SCA, and DAST.

The ideal candidate will work autonomously on complex problems, perform secure code reviews, and support development teams on application security topics. Excellent English communication skills and security expertise are essential for success in this fast-paced environment.

Qualificações

• Solid knowledge of application security concepts and practices.
• Experience in security research or web application penetration testing.
• Familiarity with both interpreted and compiled languages is essential.
• Proficiency in English with strong communication skills.

Responsabilidades

• Research security facets of multiple programming languages and frameworks.
• Perform secure code review and analyze results from Checkmarx’s AST solutions.
• Devise improvements for Checkmarx products based on application security expertise.
• Support developers on application security topics and mentor less-experienced researchers.

Conhecimentos

Application Security

Secure code review

Web application penetration testing

Interpreted languages

Compiled languages

Organizational skills

Interpersonal skills

English proficiency

Descrição da oferta de emprego

Checkmarx is the enterprise application securityleader and the host of Checkmarx One™ — the industry -leading cloud-native AppSec platform thathelps enterprises build #DevSecTrust .

Description

Who are we?

Checkmarx is the AI-powered application security leader helping the world’s most security-conscious enterprises secure the software that powers modern life. For more than two decades, our unified platform and services have helped organizations protect human- and AI-generated code from the first line through runtime, reducing risk across applications, cloud, and the software supply chain without slowing innovation.

We’re trusted by 1,600+ customers in 70+ countries, including some of the largest enterprises and governments in the world. Guided by research-led innovation and a developer-first mindset, we help every developer, security team, and enterprise build software that is risk-free by design.

What are we looking for?

We are looking for an experienced Application Security Researcher to join our Security Research team. As an experienced researcher, you will own research across application security, AI security, and emerging technologies. Analyzing how vulnerabilities manifest across languages and frameworks, and translating that expertise into improvements to Checkmarx's AST products (SAST, SCA, DAST, and beyond).

You will work autonomously on complex problems, share your findings with the team, and help raise the technical bar of Security Research teams.

How will you make an impact?

• Research the security facets of multiple programming languages, frameworks, and technologies, with depth and autonomy.
• Perform secure code review and analyze the results produced by Checkmarx's AST solutions, identifying gaps and improvement opportunities.
• Analyze and reason about code containing a wide range of vulnerabilities across multiple languages and frameworks.
• Devise and propose improvements grounded in application security expertise to bring Checkmarx products to the next level (SAST, SCA, DAST, etc.).
• Help improve detection capabilities by designing, refining, and validating detection logic and rules that power our AST solutions.
• Support developers and relevant stakeholders on application security topics.
• Share knowledge across the team, documenting findings, reviewing peers' work, and mentoring less-experienced researchers.

Requirements

What is needed to succeed?

• Solid knowledge of Application Security with deep understanding of security concepts, vulnerabilities, mitigations, and coding practices.
• Professional security experience (Security research, web application penetration testing, secure development, secure code review, or similar fields).
• Familiarity with both interpreted and compiled languages.
• Familiarity with software development and associated methodologies.
• Ability to learn new programming languages and technologies independently.
• Excellent organizational, interpersonal, and communication skills with the ability to drive collaboration and innovation.
• Ability to handle multiple requests and work in a fast-paced environment.
• Proficient in English – both writing and oral presentation skills.

What we have to offer

Checkmarx offers a great work environment, professional development, challenging careers, competitive compensation, great work-life balance, as well as great benefits and perks throughout the year.

Checkmarx is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, national or ethnic origin, gender, sexual orientation, gender identity or expression, age, disability, or other characteristics protected by law.