Security Software Engineer — Container Network Security
Check Point Software Technologies5 days ago
Tel Aviv-Yafo, IsraelMid Level
Responsibilities
- Design and implement inline traffic inspection and prevention components for Kubernetes clusters.
- Build or contribute to protocol parsers and signature/rule-matching engines.
- Contribute to an AI-assisted signature generation pipeline.
- Use the Linux networking stack to intercept and act on traffic with acceptable latency overhead.
- Optimize the data path for the resource budgets of Kubernetes workloads.
- Collaborate with detection research and cloud security teams to turn threat intelligence into enforceable rules and behaviors.
Requirements
- Professional experience with Rust or C/C++; comfort with both languages or willingness to learn the second is advantageous.
- Experience developing security products such as IPS, firewalls, security research systems, or API security products.
- General familiarity with Kubernetes and at least one public cloud among AWS, Azure, or GCP.
- Comfort building systems- or infrastructure-level software rather than only application-level code.
- Hands-on AI SDLC experience.
- Strong communication, independence, curiosity, and technical aptitude.
- Preferred experience with DPI engines, protocol parsers, signature-matching systems, Snort/Suricata-style rules, or ML/AI for anomaly detection, classification, or rule generation.
- Preferred familiarity with Linux kernel and networking internals, Kubernetes networking, container runtimes and isolation, low-latency/high-throughput systems, and attacker techniques or IPS/IDS evasion.
Tech Stack
Categories
About Check Point Software Technologies
Check Point Software Technologies Ltd. is a leading protector of digital trust, utilizing AI-powered cyber security solutions to safeguard over 100,000 organizations globally. Through its Infinity Platform and an open garden ecosystem, Check Point’s prevention-first approach delivers industry-leading security efficacy while reducing risk. Employing a hybrid mesh network architecture with SASE at its core, the Infinity Platform unifies the management of on-premises, cloud, and workspace environments to offer flexibility, simplicity and scale for enterprises and service providers.