Cyber Threat Researcher

Why Join Us?

The Threat Intelligence group, a key member of the Check Point Research department, leads global threat research efforts, and improves threat coverage across the evolving cyber threat landscape.

The group focuses on understanding and tracking cybercriminal organizations, nation-state (APT) actors, hacktivist activity, active malware campaigns, and emerging adversary trends. The research produced by the team supports both strategic insight and the development of advanced security technologies.

This role is responsible for conducting in-depth cyber threat landscape research and owning the full intelligence research lifecycle- from intelligence collection through analysis and written output.

Major Responsibilities

• Research and analyze cyber threat actors.
• Be the first to flag trends, new malware, threat actors and intelligence items that stand out in the crowd
• Execute the full intelligence research lifecycle:
• Monitoring and analyzing the digital “underground” - including the DarkNet, the DeepWeb, and other open and restricted sources
• Gather & flag intelligence that stands out.
• Assess, validate, and refine raw information into high-confidence insights
• Produce clear, well-structured written research and threat assessments
• Build, maintain, and continuously evaluate a diverse set of reliable intelligence sources
• Identify long-term trends, relationships, and shifts in adversary behavior
• Conduct deep intelligence collection operations and collect proprietary intelligence
• Collaborate with other researchers and internal stakeholders to contextualize findings and improve threat coverage
• Maintain high analytical and research standards, including sourcing, attribution, and methodological rigor

Desired Background

• At least 3 years of experience in Cyber Threat Intelligence (CTI) or cyber threat research
• Deep understanding of cyber threat landscape and cybercriminal and hacktivists ecosystems: actors and groups, motivations and goals, tools and capabilities, attacks and campaigns
• Proven experience across the full threat intelligence research lifecycle (collection, validation, analysis, production, and dissemination)
• Strong WEBINT research and virtual HUMINT operations skills, including source discovery, validation, and long-term source management.
• Excellent analytical abilities, strong attention to detail, and critical thinking skills
• Strong written communication skills, with the ability to present complex research clearly and accurately
• Ability to work independently as well as collaboratively within a research team

Big Plus

• Knowledge of Russian, Spanish, Portuguese or Mandarin.
• Familiarity with MITRE ATT&CK or similar frameworks
• Experience publishing external threat research