Checkmarx
Software Engineer
- QA
- Software Engineering
- Automation
- Testing
- SAST
- Cybersecurity
- Software lifecycle
- Security
As a Software Engineer at Checkmarx, I worked within the Quality Assurance division, primarily focused on software development for internal systems, CI/CD infrastructure, and automation platforms. Although part of the QA organization, my role was centered around backend and full-stack development, maintaining and evolving internal systems critical to the stability and performance of our SAST engine ecosystem.
Throughout this period, I maintained and improved multiple internal applications and services built using Python (Flask), Node.js (Express.js), Java (Spring Boot), and C# (WPF and ASP.NET), along with React-based frontends. These services supported validation, orchestration, and analysis processes for the company’s security engine.
I worked extensively with microservices orchestrated through Docker Swarm, refactored legacy codebases to modern standards, and led the effort to containerize multiple applications using Dev Containers. I was also responsible for maintaining and extending Jenkins pipelines while pioneering the adoption of GitHub Actions for new projects, later leading the migration of legacy pipelines to the new CI/CD framework.
One of my key projects was ‘Doppelganger’, an internal management and analytics platform for Checkmarx’s SAST engine CI testing projects. It served as a centralized source of truth for engine results and provided intelligent similarity scoring between projects to measure coverage and reduce redundancy. By identifying overlapping results, the system optimized CI workloads and reduced execution time across thousands of projects.
Another major initiative I led was the ‘Vorpal Regression Management System’, a version control and analytics platform that monitored changes in the Vorpal engine’s codebase and automatically tracked regressions or result deviations across test collections. This system allowed developers to detect breaking changes before merging code, integrating features such as multi-branch support, transaction-safe database operations, caching layers, and real-time analytics dashboards for visibility across the team.
Overall, my work spanned across full-stack development, DevOps, automation, and infrastructure, contributing to the team’s ability to deliver faster, more reliable, and more maintainable internal systems while driving modernization initiatives across the QA organization.
Highlights
- Ownership and maintenance of a new regression detection engine and platform
- Design and development of project Doppelganger for result redundancy detection
- Quality partner ownership of SAST engine teams
- Software testing using cypress
- Internal initiatives focal point and ownership

