Security Software Engineer — Container Network Security

Why Join Us?

At Check Point, what you do matters. Every day, we protect over 100,000 organizations worldwide from increasingly sophisticated cyber and AI-driven threats, securing their AI transformation.

Our prevention-first approach safeguards hybrid networks, cloud environments, digital workspaces, and AI systems, stopping attacks before they happen.

This is where innovation meets real-world impact. You’ll help customers across industries operate with confidence in a rapidly changing digital world, working alongside smart, curious people who take ownership, challenge assumptions, and solve complex problems.

We’re proud to be recognized by TIME, Newsweek, and Forbes for excellence and workplace culture.

What really sets Check Point apart is the opportunity to grow, contribute, and help companies navigate their AI transformation securely.

If you’re excited to work at the forefront of AI-driven security on a global scale, this is the place to do it.

Key Responsibilities

We are looking for a security programmer to help us build the next generation AI container network security system.

This role sits at the intersection of systems programming, network security, and cloud-native infrastructure.

What You'll Do

• Help design and implement traffic inspection and prevention components that run in-line within Kubernetes clusters (as a DaemonSet, sidecar, or CNI-integrated component)
• Build or contribute to protocol parsers and signature/rule-matching engines
• Contribute to an AI-assisted signature generation pipeline
• Work with the Linux networking stack to intercept and act on traffic with acceptable latency overhead
• Help ensure the data path is efficient enough to run under the resource budgets typical of Kubernetes workloads
• Collaborate with detection research and cloud security teams to translate threat intelligence into enforceable rules and behaviors
  
  

• Professional experience in Rust or C/C++ (comfort with both, or willingness to pick up the second, is a plus — not a hard requirement)
• Security background - experience with developing security products - such as IPS, firewall, researcher, API security, etc
• General familiarity with Kubernetes and at least one public cloud (AWS, Azure, or GCP) — production experience is preferred, but strong infrastructure/networking experience elsewhere is also welcome
• Comfort working on systems/infrastructure-level software rather than purely application-level code
• Hands on AI SDLC experience
• Curious
• Tech savvy
• Good communication skills
• Independent
  
  

• Experience with DPI engines, protocol parsers, or signature-matching systems (e.g., Snort/Suricata-style rules)
• Exposure to ML/AI approaches for anomaly detection, classification, or rule generation
• Linux kernel/networking internals: netfilter/nftables, eBPF/XDP, TCP/IP, TLS
• Kubernetes networking specifics: CNI, NetworkPolicy, service mesh data planes (Envoy/Istio)
• Container runtime/isolation experience: containerd/CRI-O, namespaces/cgroups
• Low-latency/high-throughput systems experience (zero-copy design, lock-free structures)
• Familiarity with attacker techniques and IPS/IDS evasion
• Comfort with ambiguous, greenfield technical work