Job Description

Who are we?

Checkmarx is the leader in application security and ensures that enterprises worldwide can secure their application development from code to cloud. Our consolidated platform and services address the needs of enterprises by improving security and reducing TCO, while simultaneously building trust between AppSec, developers, and CISOs. At Checkmarx, we believe it’s not just about finding risk but remediating it across the entire application footprint and software supply chain with one seamless process for all relevant stakeholders.

We are honored to serve more than 1,800 customers, which includes 40 percent of all Fortune 100 companies, including Siemens, Airbus, Salesforce, Stellantis, Adidas, Wal-Mart, and Sanofi.

How will you make an impact?

In this role, you will be responsible for:

Excellent team/autonomous work capabilities.
Developing the detailed design structure after understanding the requirements and the design.
Implementing the best practices, coding standards, and secure coding practices.
Triaging product defects and preparing release plans to address the defects and enhancements using Agile practices.
Maintaining the account of time and reporting regularity of one's own work
Create and maintain technical documentation.
Must be ready to cross-skill in other programming languages and technologies required in the project.

Requirements:

B.E. in Computer Science or equivalent.
2+ years of software development experience.
Strong experience in Java microservices (Spring Boot preferred).
Hands-on experience in Go (Golang) is preferred.
Working knowledge of frontend technologies (TypeScript/JavaScript).
Experience with REST APIs, HTTP, SSL/TLS, OAuth2/OIDC, and RDBMS.
Strong understanding of CI/CD tools (Jenkins, ADO, CircleCI, etc.).
Experience with Git-based source control (GitHub/GitLab/Azure DevOps).
Familiarity with Linux environments. Exposure to any one public cloud environment, Docker, Kubernetes
Hands-on expertise in Docker, Kubernetes, and Helm.
Must have competency in any one CI/CD tool like Jenkins, ADO, CircleCI, or similar.
Experience with cloud platforms and DevOps practices.
Strong understanding of secure development (OWASP principles).
Spec-Driven Development (SDD): Ability to create high-quality technical specs (e.g., spec files, CLAUDE.md) as a source of truth.
Agentic CLI Tools: Experience with tools like Claude Code, GitHub Copilot CLI, or Cursor for managing multi-step development workflows.
Prompt Engineering: Ability to convert business requirements into structured, precise prompts with architectural and security considerations.