Security Researcher
Research application security vulnerabilities across multiple languages and frameworks, then translate findings into improvements for Checkmarx's AST products (SAST, SCA, DAST).
- Compensation
- Not disclosed
- Location
- Braga, Braga
- Work setup
- Hybrid
- Seniority
- Not specified
- Employment
- Not specified
- Experience
- Not specified
- Category
- Security
- Posted
Skills
Must have
- Solid knowledge of Application Security with deep understanding of security concepts, vulnerabilities, mitigations, and coding practices
- Professional security experience (Security research, web application penetration testing, secure development, secure code review, or similar fields)
- Familiarity with both interpreted and compiled languages
- Familiarity with software development and associated methodologies
- Ability to learn new programming languages and technologies independently
- Excellent organizational, interpersonal, and communication skills with the ability to drive collaboration and innovation
- Ability to handle multiple requests and work in a fast-paced environment
- Proficient in English – both writing and oral presentation skills
Full description
Who are we?
Checkmarx is the AI-powered application security leader helping the world’s most security-conscious enterprises secure the software that powers modern life. For more than two decades, our unified platform and services have helped organizations protect human- and AI-generated code from the first line through runtime, reducing risk across applications, cloud, and the software supply chain without slowing innovation.
We’re trusted by 1,600+ customers in 70+ countries, including some of the largest enterprises and governments in the world. Guided by research-led innovation and a developer-first mindset, we help every developer, security team, and enterprise build software that is risk-free by design.
What are we looking for?
We are looking for an experienced Application Security Researcher to join our Security Research team. As an experienced researcher, you will own research across application security, AI security, and emerging technologies. Analyzing how vulnerabilities manifest across languages and frameworks, and translating that expertise into improvements to Checkmarx's AST products (SAST, SCA, DAST, and beyond).
You will work autonomously on complex problems, share your findings with the team, and help raise the technical bar of Security Research teams.
How will you make an impact?
- Research the security facets of multiple programming languages, frameworks, and technologies, with depth and autonomy.
- Perform secure code review and analyze the results produced by Checkmarx's AST solutions, identifying gaps and improvement opportunities.
- Analyze and reason about code containing a wide range of vulnerabilities across multiple languages and frameworks.
- Devise and propose improvements grounded in application security expertise to bring Checkmarx products to the next level (SAST, SCA, DAST, etc.).
- Help improve detection capabilities by designing, refining, and validating detection logic and rules that power our AST solutions.
- Support developers and relevant stakeholders on application security topics.
- Share knowledge across the team, documenting findings, reviewing peers' work, and mentoring less-experienced researchers.
Requirements
What is needed to succeed?
- Solid knowledge of Application Security with deep understanding of security concepts, vulnerabilities, mitigations, and coding practices.
- Professional security experience (Security research, web application penetration testing, secure development, secure code review, or similar fields).
- Familiarity with both interpreted and compiled languages.
- Familiarity with software development and associated methodologies.
- Ability to learn new programming languages and technologies independently.