{"id":1684730,"url":"https://alion.io/job/check-point-software-technologies-offensive-security-researcher","title":"Offensive Security Researcher","company":{"id":3524,"name":"Check Point Software Technologies","domain":"checkpoint.com","url":"https://alion.io/company/check-point-software-technologies","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SmartRecruiters","truth_index":null},"role":"Security","role_family":"Security","seniority":"junior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Tel Aviv, Israel"],"countries":["IL"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":58000,"max_usd":164000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":528},"experience_years_min":2,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"Machine Learning","optional":false},{"name":"Nuclei","optional":false},{"name":"Python","optional":false},{"name":"Red Teaming","optional":false},{"name":"SIEM","optional":false},{"name":"Suricata","optional":false},{"name":"YARA","optional":false},{"name":"YARA","optional":false}],"status":"live","first_seen_at":"2026-10-01T10:27:44Z","employer_posted_date":"2026-10-01","last_verified_at":"2026-10-17T13:04:28Z","board_verified":true,"closed_at":null,"days_open":16,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":16},"description":"At Check Point, what you do matters. Every day, we protect over 100,000 organizations worldwide from increasingly sophisticated cyber and AI-driven threats, securing their AI transformation.\nOur prevention-first approach safeguards hybrid networks, cloud environments, digital workspaces, and AI systems, stopping attacks before they happen.\nThis is where innovation meets real-world impact. You’ll help customers across industries operate with confidence in a rapidly changing digital world, working alongside smart, curious people who take ownership, challenge assumptions, and solve complex problems.\nWe’re proud to be recognized by TIME, Newsweek, and Forbes for excellence and workplace culture.\nWhat really sets Check Point apart is the opportunity to grow, contribute, and help companies navigate their AI transformation securely.\nIf you’re excited to work at the forefront of AI-driven security on a global scale, this is the place to do it.\n The Exposure Management Research Group at Check Point Software Technologies is expanding. We are looking for an experienced Offensive Security Researcher to join our newly formed AEV Team and lead the offensive side of our Agentic Exposure Validation (AEV) research.\nAbout the group\nThe Exposure Management Research Group is the research arm behind Check Point's Exposure Management platform. The platform helps organizations see and reduce their risk from the outside in, across their external attack surface, threat intelligence, and digital risk. The group brings together vulnerability researchers, threat intelligence analysts, phishing researchers, and data scientists. Together, we track threat actors and campaigns, analyze vulnerabilities and active exploitation, and turn that research into detections, intelligence, and validation capabilities that serve thousands of customers worldwide. Our work relies heavily on data science, machine learning, and agentic AI to operate at scale.\nAbout the position\nExposure validation goes beyond identifying that a vulnerability exists. Its purpose is to show whether an attacker could actually exploit that vulnerability, and how far they could get. In this position, you are responsible for bringing real offensive expertise into our AEV capability, which runs on an agentic AI system that validates exposures across our customers' environments.\nYou conduct hands-on offensive research, define the exploitation methodologies the system follows, and set the standard for what a validated, customer-ready finding looks like. You also work closely with our threat intelligence and detection teams, so that proven attack paths turn into protections for our customers.\nThis is a research position with direct product impact. It combines practical red team work with shaping how an AI-driven platform conducts, reasons about, and reports offensive activity.\nWhat you'll do\nDesign and run offensive research against external attack surfaces: web applications, APIs, cloud-exposed services, identity, and edge infrastructure\nTurn single findings into demonstrated impact through exploit chaining, lateral movement, and blast-radius analysis\nWrite and maintain the exploitation methodologies and attack hypotheses our agentic AEV engine runs on\nReview agent runs and findings. Separate proven impact from claimed impact, and turn the gaps you find into better prompts, methods, and guardrails\nSet the bar for customer-ready findings: a clear impact story, a reproducible chain, and remediation guidance a security team can act on\nWork with threat intelligence researchers to turn in-the-wild attacker behavior (named actors, active campaigns, newly exploited vulnerabilities) into validation plays\nHelp close the purple loop by turning proven attack paths into detection and protection logic, and working with detection engineering on coverage\nContribute to the team's research output, including internal knowledge sharing and, where it fits, external publications and talks\n 2+ years of hands-on offensive security experience: red teaming, penetration testing, or offensive research\nReal exploitation depth beyond confirming vulnerabilities, including exploit chaining, privilege escalation, lateral movement, and showing business impact\nComfort with the non-deterministic side of offense: business logic flaws, misconfigurations, credential and token abuse, and using information disclosure as an entry point\nStrong scripting and automation skills (Python preferred)\nClear written communication. You can explain a complex attack chain to an engineer and to a CISO\nStrong advantage\nA consulting background covering many customer environments, not one internal estate. You know what customers value in an engagement deliverable and how to present it\nBroad exposure to defensive technologies, security controls, and vendors, and an understanding of what attacks look like from the defender's side\nExperience with template-based or automated scanning frameworks (for example, Nuclei)\nDetection engineering experience (Snort/Suricata, YARA, SIEM detection logic)\nExperience working with large language models (LLMs) or agentic AI workflows, or a strong interest in shaping how AI systems do offensive work\nNice to have\nOffensive certifications (OSCP, OSEP, OSWE, CRTO, or similar), public CVEs, conference talks, or published research\n Why join us\nImpact at scale. A technique you capture once runs across thousands of customer environments\nA new category. Agentic exposure validation is being defined right now, and you help define it\n A strong research bench. You work next to threat intelligence, vulnerability research, and data science researchers at one of the largest cyber security companies in the world","description_format":"text","description_chars":5703,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":[],"hiring_locations":[{"name":"Israel","iso":"IL","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Penetration Testing","Cloud Security","Threat Intelligence","Information Security"],"lifecycle":[{"event":"open","at":"2026-10-02T10:13:18Z"}],"visa":[],"liveness":{"score":74,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.828,"p_room":0.9,"age_days":15,"expected_fill_days":37,"reasons":["conf:3","velocity","win:mid","comp:junior,brand"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/check-point-software-technologies-offensive-security-researcher","json_url":"https://alion.io/job/check-point-software-technologies-offensive-security-researcher.json","meta":{"generated_at":"2026-10-17T15:28:50Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":20968,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3524},"rest":"https://alion.io/mcp/rest/get_company?id=3524"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcheck-point-software-technologies-offensive-security-researcher"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcheck-point-software-technologies-offensive-security-researcher"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcheck-point-software-technologies-offensive-security-researcher"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/check-point-software-technologies-offensive-security-researcher\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcheck-point-software-technologies-offensive-security-researcher"}]}