Checkmarx

🔥 Checkmarx is Hiring: Solutions Engineer - Remote | United States 🔥 Advance your career by working with the Leader in AppSec, DevOps, and AI At Checkmarx, we help developers build secure software—faster, smarter, and with confidence. From code to cloud, we secure modern applications across CI/CD pipelines, cloud-native environments, and now AI-generated code. If you are a Solutions Engineer and want to have real technical depth + customer impact—this is where you level up fast. 💡 Why Checkmarx 🔒 AI-powered AppSec innovation — Get hands-on with Agentic AI securing human + AI-generated code, supply chain risk, and runtime environments 🚀 Build real technical skills quickly — Create demos, test vulnerabilities, and work with APIs, microservices, containers, and CI/CD tools 👨💻 Work directly with developers — Partner with engineering teams using GitHub, Azure DevOps, Jenkins, and modern workflows 💼 Learn platform selling early — Gain experience positioning a full AppSec platform, not just a single point solution 🏆 Industry leader — 7x Gartner Leader with strong recognition from Forrester & IDC 📈 Accelerated growth path — Develop into a top-tier SE with mentorship, deal exposure, and technical depth 🎯 The Opportunity This Solutions Engineer role is designed for someone who wants to grow fast in a highly technical presales environment. You’ll: Support AEs on strategic deals and technical evaluations Deliver demos, POCs, and proof-of-value engagements Learn how to connect code-level risk to business impact Help customers adopt secure development practices in modern and AI-driven environments 🛠️ What You Bring ✅ 1–2+ years of pre-sales SaaS Solutions Engineering experience ✅ Background in software development, DevOps, or security (hands-on coding preferred) ✅ Familiarity with programming/scripting (Python, JavaScript, Java, etc.) ✅ Understanding of SDLC, CI/CD, and DevSecOps concepts ✅ Exposure to AppSec fundamentals (SAST, SCA, APIs, secrets, etc.) ✅ Interest in how AI coding tools (Copilot, Cursor, etc.) are changing development ✅ Strong communication skills and willingness to learn, build, and grow quickly 💬 If you’re a technical professional looking to break into AppSec + DevSecOps + AI security, this is your opportunity. 👉 Apply or reach out to learn more. https://lnkd.in/e_7YSaKD

If you're running Checkmarx Jenkins AST plugin, you've got to make sure that you're on this current version. Any version that was published prior to December 17th, 2025 could be compromised.

What a great partner week with the Checkmarx Sales and Technical Team!! Jacksonville Beach Happy Hour with Ray Shalley , Charlotte Open House with Althea Williams Gavin McManes and Sean Casey and Atlanta watching the Savannah Bananas with Matthew Brady and Ray Shalley! Up this week- Milwaukee, Chicago and Minnesota!

A milestone worth celebrating and motivation to keep pushing forward. Honored to be named a President Club Winner 2025 at Checkmarx⁠. Achievements like this are never individual. Thank you to my teammates, mentors, customers, and everyone at Checkmarx⁠ who helped make President Club 2025 possible.

The industry has been running on borrowed trust for decades. And the bill is coming due. For years, the software supply chain operated on implicit trust — trust in vendors, in packages, in pipelines. It was never truly earned. It was just... assumed, because verifying and remediating everything was hard and expensive. AI is now calling that debt due. Fast. If you've been following the Claude Mythos developments, you already know what "collapsing time-to-exploit" means in practice: vulnerability discovery, chaining, and exploitation are no longer manual processes. They are automated, scalable, and near-instant. What used to take a skilled attacker days or weeks now happens in seconds — at industrial scale. That changes the math on trust debt entirely. When agents can reason over data, call APIs, write to databases, and trigger actions at machine speed — and attackers can weaponize every weakness in that chain almost instantly — implicit trust isn't just a philosophical problem. It's an exploitable attack surface with a very short fuse. What's striking about this ReversingLabs piece is how clearly it frames the structural shift: security risk has moved up the stack, from static components (libraries, containers, services) to the data and context AI systems consume at runtime. Classic AppSec controls are still necessary. But in a world where agents consume packages, call MCP servers, and act on context they were never meant to trust, software supply chain security isn't a nice-to-have layer on top. It's the foundation. From a software supply chain perspective, this raises questions we're actively working through at Checkmarx : → Do you know what your AI agents are consuming? → Can you verify the integrity of the MCP servers, skill files, and context sources they're acting on? → If an agent does something unexpected — or is manipulated into doing it — can you stop it before an AI attack factory finishes the job? 🚀 Eran Kinsbruner puts it well in the piece: organizations that pressure-test their assumptions and stay adaptive will be better positioned as this landscape keeps shifting. The ones still operating on fixed trust assumptions won't. The window to act is narrower than most teams think. 👉 https://lnkd.in/e3Mxp_RF #SoftwareSupplyChain #AppSec #AISecurity #AgentSecurity #TrustDebt #ADLC

1 year at Checkmarx ✔️ Time flew by—learned a lot, faced some great challenges, and grew along the way. Still learning, still improving. Big Shoutout to Allison Smith , Roel Shafer , Ashutosh Sharma , Chris Merritt and my teammates Akash Singh , Harshit Mishra , Rakshitha M for all the support and good vibes throughout. Excited for the journey ahead! 🚀

Always a great time hanging with my friends from Optiv, and few of their friends! SeanPaul Keanini Cedric Cooper Eric Johnson #optiv #checkmarx #socal

Mythos isn't the real threat. Your backlog is. The numbers tell the story: → 81% of organizations ship software with known vulnerabilities → Time-to-exploitation: 840 days (2018) → 1.6 days (2024) → projected <1 minute (2028) → Attackers now have $1 exploits. Defenders still have manual triage. The discovery race is over. AI won. The remediation race is just beginning. While everyone debates whether AI security tools create more problems than they solve, the smart money is on platforms that can handle the flood of findings these tools generate. Finding vulnerabilities is now fast and cheap. Fixing them at scale that's the $100M question every enterprise is trying to answer. At Checkmarx, this has been our #1 focus. Our customers are already dealing with 22,500+ raw findings filtered down to ~500 actionable risks through AI-powered triage. MTTR dropping from 6 hours to 1.8 minutes. The throughput that matters when exploitation windows are measured in minutes. The lesson: In a world where discovery is automated, remediation speed is your only sustainable competitive advantage. What's your organization doing to win the remediation race? https://lnkd.in/enCR_v7b #AppSec #CyberSecurity #AI #VulnerabilityManagement #DevSecOps #Mythos #CISO

The Checkmarx team will be at AWS Summit London Booth B40 on April 22nd, and we are bringing the heat. 🔥 Here's what's waiting for you: ⚡ Live demo: real-time vulnerability detection & fixes zero workflow slowdown 🤖 World's first look at our agentic AppSec capabilities 🛠️ AI-powered, code-level fix suggestions delivered straight in the IDE 🤝 Our team, in person, ready to geek out with you This is not one to miss. Swing by or lock in your 1:1 now: 🔗 https://lnkd.in/e7NwtfFw See you April 22nd. Let's go! 🙌 #AWSSummitLondon #AppSec #DevSecOps #Checkmarx #CyberSecurity #AI