Senior AppSec Analyst: Secure Code & Research Leader

Checkmarx; Braga; Presencial; EUR 40 000 - 60 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Great benefits

Resumo da oferta

Checkmarx in Braga is seeking a senior Application Security Analyst to join our Security Research group. You will dive into vulnerabilities across code, from open-source to proprietary software, and contribute to improving core engines.

You will collaborate with Product Management, R&D, and other teams while using SAST/DAST/SCA, writing Python scripts, and exploring AI to automate processes and support new features.

Qualificações

• 3-4 years of experience as an analyst or researcher, including secure code reviewing.
• 3-4 years of experience in a similar role in the security field.
• Good analytical skills.
• Familiar with key AppSec concepts, such as understanding security concepts, vulnerabilities, and secure coding practices.
• Deep understanding of OWASP Top 10 or similar.
• Experience with Python scripting/programming or similar languages.
• Familiarity with both interpreted and compiled languages and the ability to learn new programming languages and technologies independently.
• Basic experience in conducting security research, bug bounties, and Pentesting.
• Excellent writing and oral presentation skills in English.
• Resiliency and the ability to handle multiple requests and work in a fast-paced environment.
• Excellent organizational, interpersonal, and communication skills.
• The ability to innovate, think creatively, and pay close attention to details is essential in this position.
• Customer-oriented mindset and driven by innovation.
• A degree or certification in a relevant field– an advantage.

Responsabilidades

• Understand vulnerabilities and how they occur in code, from open-source libraries to proprietary code, and engage with the Security Research group.
• Collaborate with Product Management, R&D, and other teams to improve Checkmarx products.
• Contribute to secure code analysis efforts and engine improvements.
• Create scripts and leverage AI to automate and improve internal processes and feature delivery.

Conhecimentos

Application security

Vulnerability analysis

Secure code review

Python scripting

OWASP Top 10

English communication

Multi-tasking

Team collaboration

Formação académica

Degree in CS/IS or related field

Certifications (e.g., CISSP)

Ferramentas

Python

Descrição da oferta de emprego

Checkmarx in Braga is seeking a senior Application Security Analyst to join our Security Research group. You will dive into vulnerabilities across code, from open-source to proprietary software, and contribute to improving core engines.

You will collaborate with Product Management, R&D, and other teams while using SAST/DAST/SCA, writing Python scripts, and exploring AI to automate processes and support new features.