Check Point Software Technologies

Job Description The Exposure Management Research Group at Check Point Software Technologies is expanding. We are looking for an experienced Offensive Security Researcher to join our newly formed AEV Team and lead the offensive side of our Agentic Exposure Validation (AEV) research. About the group: The Exposure Management Research Group is the research arm behind Check Point's Exposure Management platform. The platform helps organizations see and reduce their risk from the outside in, across their external attack surface, threat intelligence, and digital risk. The group brings together vulnerability researchers, threat intelligence analysts, phishing researchers, and data scientists. Together, we track threat actors and campaigns, analyze vulnerabilities and active exploitation, and turn that research into detections, intelligence, and validation capabilities that serve thousands of customers worldwide. Our work relies heavily on data science, machine learning, and agentic AI to operate at scale. About the position: Exposure validation goes beyond identifying that a vulnerability exists. Its purpose is to show whether an attacker could actually exploit that vulnerability, and how far they could get. In this position, you are responsible for bringing real offensive expertise into our AEV capability, which runs on an agentic AI system that validates exposures across our customers' environments. You conduct hands-on offensive research, define the exploitation methodologies the system follows, and set the standard for what a validated, customer-ready finding looks like. You also work closely with our threat intelligence and detection teams, so that proven attack paths turn into protections for our customers. This is a research position with direct product impact. It combines practical red team work with shaping how an AI-driven platform conducts, reasons about, and reports offensive activity. What you'll do: • Design and run offensive research against external attack surfaces: web applications, APIs, cloud-exposed services, identity, and edge infrastructure • Turn single findings into demonstrated impact through exploit chaining, lateral movement, and blast-radius analysis • Write and maintain the exploitation methodologies and attack hypotheses our agentic AEV engine runs on • Review agent runs and findings. Separate proven impact from claimed impact, and turn the gaps you find into better prompts, methods, and guardrails • Set the bar for customer-ready findings: a clear impact story, a reproducible chain, and remediation guidance a security team can act on • Work with threat intelligence researchers to turn in-the-wild attacker behavior (named actors, active campaigns, newly exploited vulnerabilities) into validation plays • Help close the purple loop by turning proven attack paths into detection and protection logic, and working with detection engineering on coverage • Contribute to the team's research output, including internal knowledge sharing and, where it fits, external publications and talks Qualifications • 2+ years of hands-on offensive security experience: red teaming, penetration testing, or offensive research • Real exploitation depth beyond confirming vulnerabilities, including exploit chaining, privilege escalation, lateral movement, and showing business impact • Comfort with the non-deterministic side of offense: business logic flaws, misconfigurations, credential and token abuse, and using information disclosure as an entry point • Strong scripting and automation skills (Python preferred) • Clear written communication. You can explain a complex attack chain to an engineer and to a CISO Strong advantage • A consulting background covering many customer environments, not one internal estate. You know what customers value in an engagement deliverable and how to present it • Broad exposure to defensive technologies, security controls, and vendors, and an understanding of what attacks look like from the defender's side • Experience with template-based or automated scanning frameworks (for example, Nuclei) • Detection engineering experience (Snort/Suricata, YARA, SIEM detection logic) • Experience working with large language models (LLMs) or agentic AI workflows, or a strong interest in shaping how AI systems do offensive work Nice to have • Offensive certifications (OSCP, OSEP, OSWE, CRTO, or similar), public CVEs, conference talks, or published research Additional Information Why join us • Impact at scale. A technique you capture once runs across thousands of customer environments • A new category. Agentic exposure validation is being defined right now, and you help define it • A strong research bench. You work next to threat intelligence, vulnerability research, and data science researchers at one of the largest cyber security companies in the world

Job Description • Operate and modernize development infrastructure across on-premises and cloud environments, contributing to cloud migration and adoption of infrastructure as code. • Build and evolve CI/CD pipelines and build infrastructure to accelerate development, testing, and release workflows. • Maintain core development tools and infrastructure services, including GitLab, Artifactory, RabbitMQ, and Temporal. • Deploy, manage, and troubleshoot containerized workloads using Docker, Kubernetes, and Helm. • Develop automation, internal tools, and integrations using Python, Bash, or Go. • Support R&D teams, resolve service requests, and participate in the team’s duty and on-call rotation for critical development services. • Strengthen monitoring, logging, and alerting, investigate incidents, and automate recurring operational work. • Apply AI engineering tools and agentic workflows to accelerate daily tasks and develop internal automation. • Collaborate with development and security teams, maintaining clear documentation and operational runbooks. Qualifications • 3+ years of experience in DevOps, platform engineering, infrastructure engineering, or a related role. • Strong Linux administration skills and practical troubleshooting experience across systems, networking, and development infrastructure. • Strong scripting and automation skills in Python or Bash. • Experience building and maintaining CI/CD pipelines using tools such as GitLab CI or GitHub Actions. • Hands-on experience with Docker and Kubernetes. • Practical experience with a public cloud platform, preferably AWS. • Experience with infrastructure as code or configuration management tools such as Terraform or Ansible. • Experience with monitoring, logging, and production troubleshooting. • Strong practical proficiency with AI engineering tools, including coding assistants and agentic workflows; the ability to integrate them into engineering processes, assess output quality, and stay current with industry innovations and best practices. • A service-oriented approach, clear communication, and ownership of issues through resolution. • The ability to independently research unfamiliar technologies and implement practical solutions. Nice to Have • Experience migrating on-premises workloads to the cloud or operating hybrid environments. • Experience with Helm and GitOps tools such as Argo CD or Flux. • Experience operating GitLab, Artifactory, RabbitMQ, or Temporal. • Familiarity with Prometheus, Grafana, or centralized logging platforms. • Software development experience in Python or Go, including internal developer tooling or AI agents. • Experience with virtualization or Windows/macOS administration.

Job Description • Cloud Infrastructure & Architecture: Play an important role in shaping our AWS-first cloud architecture, with a focus on scalability, reliability, security, innovation, and long-term success. • Production Reliability: Tackle large-scale production issues and proactively improve the reliability, efficiency, availability, and observability of our cloud services. • Cross-Functional Collaboration: Work closely with stakeholders across R&D, Security, Product, and other groups to ensure seamless integration of DevOps practices. • Automation & Developer Experience: Automate and streamline operations and development processes, reduce manual intervention, and improve the developer experience. • Security & Cost Optimization: Help ensure that our infrastructure is secure, efficient, aligned with organizational standards, and cost-effective. • Cloud Operations Excellence: Drive improvements in deployment practices, monitoring, infrastructure management, and operational maturity. Qualifications • 4+ years of relevant DevOps experience in large-scale production environments. • Extensive experience with cloud computing technologies, preferably AWS. • Experience with monitoring and observability tools, especially Grafana. • Proven experience with Infrastructure as Code tools, such as Terraform. • Experience with GitOps and CI/CD methodologies and tools. • Proven experience working with Kubernetes or managed container services, such as EKS, AKS, or ECS, in production environments. • DevOps security mindset, including understanding of secure development lifecycles, cloud security, and infrastructure security. • Strong ability to independently analyze problems, suggest practical solutions, and drive implementation end to end. • Excellent communication skills and the ability to work effectively with cross-functional stakeholders. Preferred Qualifications • Experience with both AWS and Azure. • Experience with managed data services such as MongoDB Atlas, Azure Data Explorer, Cosmos DB, Amazon RDS, or Amazon Aurora. • Experience with PostgreSQL management, performance tuning, and optimization. • Python scripting or development experience.

Job Description Ready to shape the future of Email Security at Check Point? Join us as a Software Tech Lead and help drive the technical vision of a talented development team at the forefront of innovation. If you thrive in dynamic environments, have a passion for building scalable solutions, and want to make a real impact on thousands of users worldwide, this is your chance to provide technical leadership, drive engineering excellence, and contribute to a product recognized by Gartner as a market leader. Email Security is one of the fastest-growing domains at Check Point, playing a critical role in protecting organizations against advanced threats. Check Point has been recognized as a Market Leader in Gartner for Email Security, reflecting our innovation, scale, and proven success in the field. Our platform serves thousands of paying customers worldwide, operating across multiple geographic regions and supporting a truly global user base. The system is designed as a highly scalable, cloud-native solution, built to handle massive volumes of email traffic with strict performance and reliability requirements. We work closely with AWS to deliver top-tier performance, availability, and security, leveraging advanced cloud services and best practices to provide an exceptional customer experience. *Technical Leadership and Mentorship Provide technical leadership and mentorship to developers, driving engineering excellence, promoting best practices, and fostering a collaborative and innovative environment. *Innovation and R&D Stay updated with the latest industry trends and technologies, and drive innovation across the team. *AI-Driven Development Leadership • Lead the technical design and development of internal AI-powered DevTools and engineering productivity solutions. • Collaborate cross-functionally with Product, UX, Customer Success, and other stakeholders to define and deliver AI-powered solutions. • Guide the team in prompt and context engineering best practices and the development of AI-based capabilities. *Technical Leadership Drive technical execution, architecture, and delivery, ensuring high-quality solutions are delivered on time. *Code Review and Quality Assurance Conduct regular code reviews to maintain high code quality and adherence to best practices. *Technical Excellence Drive engineering standards, system reliability, performance, and continuous improvement across the codebase. *Collaboration Collaborate closely with cross-functional teams and customers to solve complex problems and innovate new features. Qualifications • Bachelor's degree in Computer Science, Software Engineering, or a related field. • At least 7 years of software development experience, including experience as a Tech Lead or leading technical initiatives. • Proficiency in Python or another backend programming language. • Expertise in AWS and working in high-scale production environments. • Strong system design and software architecture skills. • Experience with performance optimization, scalability, and production troubleshooting. • Proven ability to lead cross-team and organization-wide technical initiatives, driving alignment and execution across multiple engineering groups. • Experience with web development frameworks such as Angular, React, or Vue, or experience leading full-stack development. • Hands-on experience using AI-assisted development tools and developing AI-based capabilities. • Excellent problem-solving skills and attention to detail. • Strong communication and interpersonal skills. • Ability to work effectively in a fast-paced and dynamic environment.

Job Description • Lead and mentor a team of talented software engineers • Drive the design and development of advanced Threat Prevention technologies and security engines • Lead the development of new AI-powered detection and prevention capabilities • Own the team's technical roadmap, architecture, and execution • Take an active hands-on role in the design and implementation of core system components • Build highly scalable, high-performance backend solutions focused on security, reliability, and operational excellence • Drive innovation and introduce new technologies, methodologies, and security approaches. • Develop backend components using C++, C, and Python Qualifications • 2+ years of experience leading software development teams • Extensive experience designing and developing large-scale software systems • Solid networking knowledge • Experience in cybersecurity, threat prevention, network security, or related domains – a significant advantage • Self-driven, innovative, and passionate about technology. • Very high technical competence with approximately 50% hands-on involvement