Role Description Assistance and Advisory Service (AAS) is seeking personnel to provide governance and coordination support for enterprise cybersecurity governance activities, specifically supporting the Cyber Lessons Learned (LL) and NATO Enterprise Cybersecurity Scorecard (Scorecard) processes. - Support the implementation and operationalization of the Cyber Lessons Learned process across relevant cybersecurity stakeholders. - Engage stakeholders involved in the relevant cybersecurity processes. - Coordinate the capture and structuring of lessons learned information. - Support documentation of changes made to procedures or documentation resulting from lessons learned. - Support the organization and documentation of Lessons Learned coordination meetings and workshops. - Support the maintenance of templates, repositories, or portals used to capture lessons learned information. - Support coordination of the Assessment Team (including contractors) performing Scorecard activities. - Review contractor outputs and provide quality assurance observations to CDT. - Maintain oversight documentation such as tracking dashboards, issue logs, and status summaries. Qualifications - Expertise in Cyber Security: Extensive experience in cyber security with a focus on analytical assessment, scorecard development, and performance metrics. - Methodology Development Skills: Proficiency in developing, refining, and updating methodologies for assessing cybersecurity maturity and performance. - Experience with Lessons Learned or Knowledge Management Processes: Experience supporting Lessons Learned, knowledge management, or continuous improvement processes. - Communication Skills: Strong written and verbal communication skills for engaging with various stakeholders. - Autonomous Working Capability: Capable of performing effectively and efficiently with minimal supervision. Requirements - Valid National or NATO Secret personal security clearance. - Remote working location (in a NATO country). - Some travel to other NATO sites may be required. Benefits - Opportunity to work with NATO and contribute to critical cybersecurity initiatives. - Flexible working arrangements.

• Investigate potential security threats • Escalate issues to higher-level support when necessary • Assess and understand customer cybersecurity support needs effectively • Implement cybersecurity principles rigorously to safeguard customer information • Ensure compliance with all Trapp and ArmorPoint policies and procedures • Review alerts and collect data for incident response for further investigation • Assist in facilitating forensic analysis as needed • Research emerging threats and vulnerabilities to improve incident identification • Stay informed to the latest cybersecurity trends and challenges • Optimize response times and close alerts efficiently to meet time-close requirements • Participate in internal meetings and mandatory training sessions • Stay updated on industry best practices and emerging technologies • Maintain a professional demeanor at all times • Uphold the integrity of the organization and its policies • Other duties as assigned

Role Description We are looking for an experienced Team Leader to head our Application Security Research team. You will lead a distributed group of researchers based across Portugal (PT) and Israel (IL), setting direction, growing people, and driving the research that powers Checkmarx products. This is a hands-on leadership role: you will own the team's roadmap, KPIs, and ways of working while staying close enough to the technical material to mentor researchers and shape solutions. How will you make an impact? - Team Leadership & People Management - Lead, mentor, and grow a distributed team of security researchers working across multiple locations (PT and IL) and time zones. - Own the team's operating model: effort estimation, resource allocation, prioritization, and capacity planning. - Define and track team and individual KPIs and OKRs; turn them into clear, measurable goals and review progress on a regular cadence. - Build and maintain the team's research roadmap in alignment with the broader Security Research group and product strategy. - Run effective async-first rituals (written updates, documented decisions, structured handoffs) so the team stays aligned across time zones without depending on real-time overlap. - Drive a culture of continuous improvement with retrospectives, feedback loops, and iterative refinement of how the team works. - Own each team member's growth: regular 1:1s, career-path planning, skills development, and performance reviews. - Foster an inclusive, high-trust environment that unites team members across locations into one cohesive team. - Research & Technical Leadership - Lead research initiatives across application security, AI security, and emerging technologies. - Assess risks and identify opportunities to enhance Checkmarx products and security capabilities. - Collaborate and coordinate work with other teams across the Security Research group. - Support Product Managers across the different product units and consult developers on application security topics. - Review and research the security facets of multiple programming languages, technologies, and ecosystems. - Review and analyze vulnerable code across multiple languages and frameworks. - Devise and design solutions and features grounded in application security expertise to bring Checkmarx products to the next level. Qualifications - 3+ years of proven experience as a Team Leader / Engineering or Research Manager. - Demonstrated experience leading remote and distributed teams, ideally across multiple locations, cultures, and time zones. - Strong command of asynchronous working methods, clear written communication, documentation discipline, and decision-making that doesn't require everyone online at once. - Track record of continuous improvement and people development: growing team members, supporting career paths, and raising the bar over time. - Experience defining and managing KPIs/OKRs, roadmaps, and prioritization in a research or engineering context. - Highly organized, with the ability to structure work, manage dependencies, and keep a distributed team aligned. - Cultural awareness and the ability to build cohesion across geographically and culturally diverse team members. - Solid and extensive knowledge of Application Security. - Deep understanding of security concepts, vulnerabilities, mitigations, and secure coding practices. - Professional security experience (Security research, web application penetration testing, secure development, secure code review, or similar fields). - Familiarity with software development and associated methodologies. - Solid programming knowledge across both interpreted and compiled languages. - Ability to learn new programming languages and technologies independently. - Familiarity with project management and Agile methodologies. - Strong organizational, interpersonal, and communication skills, with the ability to drive collaboration and innovation. - Ability to handle multiple priorities and thrive in a fast-paced environment. - Proficient in English, both written and oral presentation skills. Benefits - Great work environment. - Professional development. - Challenging careers. - Competitive compensation. - Great work-life balance. - Great benefits and perks throughout the year. Company Description Checkmarx is the AI-powered application security leader helping the world’s most security-conscious enterprises secure the software that powers modern life. For more than two decades, our unified platform and services have helped organizations protect human- and AI-generated code from the first line through runtime, reducing risk across applications, cloud, and the software supply chain without slowing innovation. We’re trusted by 1,600+ customers in 70+ countries, including some of the largest enterprises and governments in the world.

• Participar en la implementación, mantenimiento y mejora continua del Sistema de Gestión de Seguridad de la Información (ISMS) basado en ISO/IEC 27001. • Diseñar, mantener y actualizar políticas, estándares, procedimientos y otra documentación del programa de seguridad. • Participar activamente en la preparación y ejecución de auditorías internas y externas, especialmente las relacionadas con ISO/IEC 27001, coordinando la recolección de evidencia y seguimiento de hallazgos y planes de acción. • Colaborar de manera transversal con tecnología, producto y equipos de negocio para apoyar la adopción práctica de políticas de seguridad, analizar procesos, proyectos y cambios técnicos, y asegurar que la seguridad esté efectivamente incrustada en las iniciativas clave de la empresa. • Diseñar y ejecutar campañas de concienciación en seguridad (simulaciones de phishing, higiene de contraseñas, manejo de información, mejores prácticas). • Realizar evaluaciones de riesgos, documentar hallazgos y proponer planes de mitigación, incluyendo gestión de riesgos de terceros (TPRM). • Desarrollar métricas, KPIs y paneles de control para monitorear el estado del programa de seguridad, riesgos y cumplimiento. • Apoyar la revisión enfocada en seguridad de la configuración de herramientas corporativas (ej. Google Workspace, herramientas internas). • Proponer mejoras continuas al programa GRC, explorando automatización y enfoques más eficientes para el cumplimiento. • Contribuir activamente a fortalecer la cultura de seguridad de la organización.