Student Malware Analyst

Check Point Research (CPR) is looking for a Threat Researcher to join the Threat Intelligence Analysis (TIA) team. The team is responsible for discovering, analyzing, and tracking advanced threat actors and campaigns, with a strong focus on high-end cybercrime and state-sponsored activities. You will join a team of motivated, independent, and highly technical individuals, contributing to efforts that protect Check Point customers and enhance the Check Point brand.

Major Responsibilities

• Identify, understand, and monitor advanced campaigns using publicly available sources as well as internal telemetry.
• Analyze malware and other hacking tools utilized by threat actors in active campaigns and intrusions.
• Create technical research content for public and private intelligence reports.
• Help build protections and detections based on a deep understanding of advanced threat actors’ Tactics, Techniques, and Procedures (TTPs).
• Collaborate with other security teams to assist with threat intelligence and research tasks.

Desired Background

• Students from faculties: Computer Science, Computer/Software Engineering, Information Systems/Communication Systems Engineering.
• Students with a minimum remaining of 1.5 years as a student.
• Availability to work 2-3 days a week – must.
• Relevant experience as a threat researcher, incident responder, malware analyst, detection engineer, or in other relevant roles.
• Practical experience in tracking state-sponsored or advanced financially motivated actors – including malware, infrastructure, and TTPs.
• Profound knowledge and understanding of malware and common attacking techniques.
• Hands-on experience in automating and optimizing hunting and enrichment processes using code (preferably Python).
• Familiarity with query languages and data exploration tools.
• Ability to translate technical findings into actionable detection and prevention signatures.
• Experience in writing technical blog posts and technical analysis reports.
• Experience in public speaking and presenting research at cybersecurity conferences.