Checkmarx SME (Security Scanning & Application Security)Charlotte, NC (Hybrid)
Technology
Job Description
Role : Checkmarx SME (Security Scanning & Application Security)
\n
Location : Charlotte, NC (Hybrid)
\n
Long Term
\n
\n
Job Summary
\n
We are seeking a Checkmarx Subject Matter Expert (SME) with strong experience supporting and optimizing Checkmarx-based application security programs. This is not a Checkmarx implementation role. The ideal candidate will have hands-on experience using Checkmarx in enterprise environments, advising development and security teams, interpreting scan results, and driving remediation best practices.
\n
\n
Key Responsibilities
\n
- \n
- Act as the Checkmarx SME for application security initiatives.
- Review and analyze Checkmarx scan results and recommend remediation strategies.
- Support vulnerability triage, prioritization, and risk assessment activities.
- Work closely with application development, DevSecOps, and security teams.
- Establish best practices for SAST usage and secure coding.
- Assist in policy tuning, rule optimization, and false positive reduction.
- Provide guidance on integrating Checkmarx into SDLC and CI/CD pipelines.
- Support audits, security assessments, and compliance initiatives.
- Create dashboards, reports, and vulnerability metrics for leadership.
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
- 8+ years of Application Security experience.
- 5+ years of hands-on experience with Checkmarx.
- Strong understanding of SAST methodologies.
- Experience supporting vulnerability management programs.
- Knowledge of secure coding practices across Java, .NET, Python, or similar technologies.
- Experience working with CI/CD tools and DevSecOps processes.
- Strong stakeholder communication skills.
- Experience with Checkmarx One or Checkmarx SAST platforms.
- Security certifications such as CSSLP, CISSP, Security+, or similar.
- Experience with additional security tools such as Veracode, Fortify, SonarQube, or Snyk.
\n
Required Qualifications
\n
- \n
\n
\n
\n
\n
\n
\n
\n
\n
\n
Preferred Qualifications
\n
- \n
\n
\n
\n