Job description

Role : Checkmarx SME (Security Scanning & Application Security) Location : Charlotte, NC (Hybrid) Rate: $60 to $65/hr Work Experience : 8 to 12 Years Job Summary We are seeking a Checkmarx Subject Matter Expert (SME) with strong experience supporting and optimizing Checkmarx-based application security programs. This is not a Checkmarx implementation role. The ideal candidate will have hands-on experience using Checkmarx in enterprise environments, advising development and security teams, interpreting scan results, and driving remediation best practices. Key Responsibilities • Act as the Checkmarx SME for application security initiatives. • Review and analyze Checkmarx scan results and recommend remediation strategies. • Support vulnerability triage, prioritization, and risk assessment activities. • Work closely with application development, DevSecOps, and security teams. • Establish best practices for SAST usage and secure coding. • Assist in policy tuning, rule optimization, and false positive reduction. • Provide guidance on integrating Checkmarx into SDLC and CI/CD pipelines. • Support audits, security assessments, and compliance initiatives. • Create dashboards, reports, and vulnerability metrics for leadership. Required Qualifications • 8+ years of Application Security experience. • 5+ years of hands-on experience with Checkmarx. • Strong understanding of SAST methodologies. • Experience supporting vulnerability management programs. • Knowledge of secure coding practices across Java, .NET, Python, or similar technologies. • Experience working with CI/CD tools and DevSecOps processes. • Strong stakeholder communication skills. Preferred Qualifications • Experience with Checkmarx One or Checkmarx SAST platforms. • Security certifications such as CSSLP, CISSP, Security+, or similar. • Experience with additional security tools such as Veracode, Fortify, SonarQube, or Snyk.

Requirements

Must-haves

Role : Checkmarx SME (Security Scanning & Application Security)
Location : Charlotte, NC (Hybrid)
Rate: $60 to $65/hr
Work Experience : 8 to 12 Years
Act as the Checkmarx SME for application security initiatives.
Review and analyze Checkmarx scan results and recommend remediation strategies.
Support vulnerability triage, prioritization, and risk assessment activities.
Work closely with application development, DevSecOps, and security teams.
Establish best practices for SAST usage and secure coding.
Assist in policy tuning, rule optimization, and false positive reduction.
Provide guidance on integrating Checkmarx into SDLC and CI/CD pipelines.
Support audits, security assessments, and compliance initiatives.
Create dashboards, reports, and vulnerability metrics for leadership.
8+ years of Application Security experience.
5+ years of hands-on experience with Checkmarx.
Strong understanding of SAST methodologies.
Experience supporting vulnerability management programs.
Knowledge of secure coding practices across Java, .NET, Python, or similar technologies.
Experience working with CI/CD tools and DevSecOps processes.
Strong stakeholder communication skills.

Nice-to-haves

Experience with Checkmarx One or Checkmarx SAST platforms.
Security certifications such as CSSLP, CISSP, Security+, or similar.
Experience with additional security tools such as Veracode, Fortify, SonarQube, or Snyk.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

ci/cdjavapython

Platform: jobdiva
Effort: medium