Senior Threat Intelligence Researcher

At Check Point, what you do matters. Every day, we protect over 100,000 organizations worldwide from increasingly sophisticated cyber and AI-driven threats, securing their AI transformation. Our prevention-first approach safeguards hybrid networks, cloud environments, digital workspaces, and AI systems, stopping attacks before they happen.

This is where innovation meets real-world impact. You’ll help customers across industries operate with confidence in a rapidly changing digital world, working alongside smart, curious people who take ownership, challenge assumptions, and solve complex problems. We’re proud to be recognized by TIME, Newsweek, and Forbes for excellence and workplace culture.

What really sets Check Point apart is the opportunity to grow, contribute, and help companies navigate their AI transformation securely. If you’re excited to work at the forefront of AI-driven security on a global scale, this is the place to do it. Check Point Research (CPR) is looking for a Threat Researcher to join its Threat Intelligence Analysis (TIA) team.

The team is responsible of discovering, analyzing and tracking advanced threat actors and campaigns, with a strong focus on high-end cybercrime and state-sponsored activities. You will join a team of motivated, independent & highly technical individuals and contribute the effort to protect Check Point customers and empower the Check Point brand.

Identify, understand and monitor advanced campaigns using publicly available sources as well as internal telemetry. Analyze malware and other hacking tools utilized by threat actors in active campaigns and intrusions. Create technical research content for public and private intelligence reports. Help build protections and detections based on deep understanding of advanced threat actors’ Tactics Techniques and Procedures (TTPs).

Collaborate with other security teams to assist threat intelligence and research tasks. Your Knowledge & Skills 5+ years of experience as a threat researcher, incident responder, malware analyst, detection engineer or other relevant roles. Practical experience in tracking state-sponsored or advanced financially motivated actors – including malware, infrastructure and TTPs.

Profound knowledge and understanding of malware and common attacking techniques. Hands-on experience in automating and optimizing hunting and enrichment processes using code (preferably Python). Familiarity with query languages and data exploration tools. Ability to translate technical findings into actionable detection and prevention signatures.

Experience in writing technical blog posts and technical analysis reports. Experience in public speaking and presentation of research in cyber security conferences . Fluent English.