DevSecOps Engineer - CheckMarx

DevSecOps Engineer – Checkmarx

Job Summary

We are looking for a DevOps Engineer with hands-on experience in Checkmarx, CI/CD pipelines, and DevSecOps practices. The ideal candidate will be responsible for integrating security scanning into development pipelines, identifying vulnerabilities, and working with development teams to ensure secure application delivery.

Key Responsibilities

• Integrate and manage Checkmarx security scans within CI/CD pipelines.
• Identify, analyze, and track security vulnerabilities.
• Work with developers to remediate application security issues.
• Build and maintain CI/CD pipelines using tools such as Azure DevOps, GitHub Actions, or Jenkins.
• Support cloud environments on AWS, Azure, or GCP.
• Automate deployments, security checks, and compliance validations.
• Promote secure coding and DevSecOps best practices.

Required Skills

• 3+ years of DevOps or DevSecOps experience.
• Hands-on experience with Checkmarx (SAST/SCA).
• Experience with Azure DevOps, GitHub Actions, or Jenkins.
• Knowledge of OWASP Top 10 and application security concepts.
• Experience with AWS, Azure, or GCP.
• Scripting experience using PowerShell, Bash, or Python.
• Experience with Docker and Kubernetes is a plus.

Preferred Skills

• Experience with SonarQube, Veracode, Snyk, or Fortify.
• Knowledge of Infrastructure as Code (Terraform, CloudFormation).