Role Description We are looking for an experienced Team Leader to head our Application Security Research team. You will lead a distributed group of researchers based across Portugal (PT) and Israel (IL), setting direction, growing people, and driving the research that powers Checkmarx products. This is a hands-on leadership role: you will own the team's roadmap, KPIs, and ways of working while staying close enough to the technical material to mentor researchers and shape solutions. How will you make an impact? - Team Leadership & People Management - Lead, mentor, and grow a distributed team of security researchers working across multiple locations (PT and IL) and time zones. - Own the team's operating model: effort estimation, resource allocation, prioritization, and capacity planning. - Define and track team and individual KPIs and OKRs; turn them into clear, measurable goals and review progress on a regular cadence. - Build and maintain the team's research roadmap in alignment with the broader Security Research group and product strategy. - Run effective async-first rituals (written updates, documented decisions, structured handoffs) so the team stays aligned across time zones without depending on real-time overlap. - Drive a culture of continuous improvement with retrospectives, feedback loops, and iterative refinement of how the team works. - Own each team member's growth: regular 1:1s, career-path planning, skills development, and performance reviews. - Foster an inclusive, high-trust environment that unites team members across locations into one cohesive team. - Research & Technical Leadership - Lead research initiatives across application security, AI security, and emerging technologies. - Assess risks and identify opportunities to enhance Checkmarx products and security capabilities. - Collaborate and coordinate work with other teams across the Security Research group. - Support Product Managers across the different product units and consult developers on application security topics. - Review and research the security facets of multiple programming languages, technologies, and ecosystems. - Review and analyze vulnerable code across multiple languages and frameworks. - Devise and design solutions and features grounded in application security expertise to bring Checkmarx products to the next level. Qualifications - 3+ years of proven experience as a Team Leader / Engineering or Research Manager. - Demonstrated experience leading remote and distributed teams, ideally across multiple locations, cultures, and time zones. - Strong command of asynchronous working methods, clear written communication, documentation discipline, and decision-making that doesn't require everyone online at once. - Track record of continuous improvement and people development: growing team members, supporting career paths, and raising the bar over time. - Experience defining and managing KPIs/OKRs, roadmaps, and prioritization in a research or engineering context. - Highly organized, with the ability to structure work, manage dependencies, and keep a distributed team aligned. - Cultural awareness and the ability to build cohesion across geographically and culturally diverse team members. - Solid and extensive knowledge of Application Security. - Deep understanding of security concepts, vulnerabilities, mitigations, and secure coding practices. - Professional security experience (Security research, web application penetration testing, secure development, secure code review, or similar fields). - Familiarity with software development and associated methodologies. - Solid programming knowledge across both interpreted and compiled languages. - Ability to learn new programming languages and technologies independently. - Familiarity with project management and Agile methodologies. - Strong organizational, interpersonal, and communication skills, with the ability to drive collaboration and innovation. - Ability to handle multiple priorities and thrive in a fast-paced environment. - Proficient in English, both written and oral presentation skills. Benefits - Great work environment. - Professional development. - Challenging careers. - Competitive compensation. - Great work-life balance. - Great benefits and perks throughout the year. Company Description Checkmarx is the AI-powered application security leader helping the world’s most security-conscious enterprises secure the software that powers modern life. For more than two decades, our unified platform and services have helped organizations protect human- and AI-generated code from the first line through runtime, reducing risk across applications, cloud, and the software supply chain without slowing innovation. We’re trusted by 1,600+ customers in 70+ countries, including some of the largest enterprises and governments in the world.

• Participar en la implementación, mantenimiento y mejora continua del Sistema de Gestión de Seguridad de la Información (ISMS) basado en ISO/IEC 27001. • Diseñar, mantener y actualizar políticas, estándares, procedimientos y otra documentación del programa de seguridad. • Participar activamente en la preparación y ejecución de auditorías internas y externas, especialmente las relacionadas con ISO/IEC 27001, coordinando la recolección de evidencia y seguimiento de hallazgos y planes de acción. • Colaborar de manera transversal con tecnología, producto y equipos de negocio para apoyar la adopción práctica de políticas de seguridad, analizar procesos, proyectos y cambios técnicos, y asegurar que la seguridad esté efectivamente incrustada en las iniciativas clave de la empresa. • Diseñar y ejecutar campañas de concienciación en seguridad (simulaciones de phishing, higiene de contraseñas, manejo de información, mejores prácticas). • Realizar evaluaciones de riesgos, documentar hallazgos y proponer planes de mitigación, incluyendo gestión de riesgos de terceros (TPRM). • Desarrollar métricas, KPIs y paneles de control para monitorear el estado del programa de seguridad, riesgos y cumplimiento. • Apoyar la revisión enfocada en seguridad de la configuración de herramientas corporativas (ej. Google Workspace, herramientas internas). • Proponer mejoras continuas al programa GRC, explorando automatización y enfoques más eficientes para el cumplimiento. • Contribuir activamente a fortalecer la cultura de seguridad de la organización.

• Develop, manage, and execute Information Security Governance, Risk and Compliance across the bank. • Contribute strategically to the bank’s success and enable the business and technology strategy to expand with secure service offering. • Ensure the confidentiality, integrity, and availability of sensitive information and IT assets.

Role Description A leading medical institution is seeking an Information Security Compliance Officer to lead initiatives to protect our digital resources, develop and implement innovative security strategies to effectively mitigate risks, and maintain a secure and resilient environment for education, research, and healthcare. - Lead the overall NIST readiness effort to support the research community, focusing on compliance with NIH requirements, Cybersecurity Maturity Model Certification (CMMC), and NIST SP 800-171 standards. - Execute a comprehensive strategy to prepare the university for an increasing number of security audits and evolving regulatory requirements, emphasizing compliance with CMMC, NIH, and NIST SP 800-171. - Develop frameworks that meet current cybersecurity standards and anticipate emerging challenges in the landscape of research-related security. - Coordinate efforts across various departments to establish and maintain a robust compliance framework. - Identify and analyze the university's existing security posture and determine gaps that may hinder compliance. - Develop, maintain, and enforce information security policies, procedures, and standards in line with industry regulations, best practices, and the organization's risk management program. Qualifications - 7+ years of experience in information security, risk management, or compliance. - A bachelor’s degree. - Experience in higher education. - CMMC level 1 and level 2 experience. - Extensive policy/standards creation experience. - Proven experience in information security, risk management, and compliance with a focus on establishing robust security frameworks. - In-depth understanding of industry standards and regulations, particularly NIST & HIPAA. - Strong analytical and critical thinking skills, with a demonstrated ability to identify, assess, and mitigate complex security risks effectively. - Significant experience in leading security audits, risk assessments, and vulnerability assessments to ensure compliance and enhance security measures. - Comprehensive knowledge of security technologies, including encryption methods, firewalls, intrusion detection systems, and Security Information and Event Management (SIEM) solutions. - Multiple years of experience in a leadership role within a cybersecurity, information security, or compliance-related team, demonstrating the ability to guide and mentor junior staff while driving compliance initiatives. - Exceptional capability to convey complex technical concepts in accessible language to diverse audiences, ensuring effective communication with stakeholders at all levels of technical expertise. - Strong commitment to professional development and staying current with the latest security threats, technologies, and evolving industry regulations to inform compliance strategies. Requirements - Hourly pay: $140/hr - Worksite: Leading medical institution (Stanford, CA 94305 - Open to remote candidates in the United States) - W2 Employment - Group Medical, Dental, Vision, Life - Retirement Savings Program - 40 hours/week, 12 Month Assignment Shift - M-F business hours.