SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Checkmarx is a leader in application security, serving over 1,800 enterprises including 40% of Fortune 100 companies. The company provides a consolidated platform that helps organizations secure their application development from code to cloud, addressing the needs of AppSec teams, developers, and CISOs.
As an Application Security Analyst, you will perform in-depth technical analysis of open-source packages to identify malicious behavior and security threats. Your responsibilities include analyzing source code across multiple programming languages, investigating obfuscation techniques, suspicious execution flows, and hidden payloads within applications. You will evaluate and validate detections from security tools to ensure accuracy and reduce false positives.
You will develop scripts and internal tools, primarily using Python, to automate and support security analysis workflows. This includes building utilities that enhance the team's ability to detect, investigate, and remediate security issues at scale. Collaboration is key—you will work closely with the Supply Chain Security (SCS) research team and other security teams within the organization to share findings, improve detection capabilities, and contribute to the broader security research mission.
The role combines hands-on technical analysis with tool development, requiring strong coding skills and a deep understanding of application security concepts. You will contribute to Checkmarx's mission of not just finding security risks, but enabling enterprises to remediate them across their entire application footprint and software supply chain.
