Security Software Engineer – Container Network Security

About the role

Check Point is looking for a security software engineer to help build the next‑generation AI‑driven container network security system. The role sits at the intersection of systems programming, network security, and cloud‑native infrastructure, working on high‑performance components that protect Kubernetes workloads.

Key responsibilities

• Design and implement traffic inspection and prevention components that run inline within Kubernetes clusters (as a DaemonSet, sidecar, or CNI‑integrated module).
• Build or contribute to protocol parsers and signature/rule‑matching engines for container workloads.
• Develop AI‑assisted signature generation pipelines and translate threat intelligence into enforceable rules.
• Work with the Linux networking stack, eBPF/XDP and netfilter to intercept traffic with minimal latency.
• Ensure the data path meets the resource budgets typical of Kubernetes workloads and supports high‑throughput, low‑latency processing.

Required profile

• Professional experience in systems programming with Rust or C/C++ (or willingness to learn the other language).
• Background in security product development such as IPS, firewalls, API security or related research.
• Hands‑on experience with Kubernetes and at least one public cloud platform (AWS, Azure or GCP).
• Comfort working on infrastructure‑level software rather than pure application code.
• Experience with AI/ML lifecycle for security use cases.

Required skills

• Rust
• C/C++
• Kubernetes (DaemonSet, sidecar, CNI, NetworkPolicy)
• Public cloud platforms: AWS, Azure, GCP
• Linux networking stack, netfilter/nftables, eBPF/XDP
• TCP/IP, TLS
• Container runtimes: containerd, CRI‑O, namespaces, cgroups
• DPI engines, protocol parsers, signature‑matching (Snort/Suricata style)
• AI/ML for anomaly detection, classification or rule generation