Product Security Engineer at Check Point Software Technologies

Tel Aviv, Tel Aviv, Israel -

Full Time

Start Date

Immediate

Expiry Date

17 Oct, 26

Salary

0.0

Posted On

19 Jul, 26

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Secure Development Life Cycle, Threat Modeling, Vulnerability Management, SAST, DAST, SCA, Secure Architecture, Incident Response, Code Review, CVE, CVSS, CI/CD Integration, Offensive Security, AppSec Tooling, Secure Coding, Security Strategy

Industry

Computer and Network Security

Description

Company Description We are looking for a Security Lead to join Check Point’s R&D organization, taking a central, cross-functional role in shaping the security posture of our products. This role combines deep hands-on expertise with cross-organizational leadership, working closely with senior leaders to shape and implement security strategy across all product lines. You will lead end-to-end security initiatives, influence engineering practices at scale, and play a critical role in ensuring our products meet the highest security standards. Job Description Lead security in the R&D organization by professionalism and cooperation across Check Point Maintain and develop the Secure Development Life Cycle of all Check Point’s Products Organization, work with R&D, QA, Sales, Support, external researchers, and customers to make the cyber landscape a safer place. Conduct architectural security reviews and threat modeling for R&D Full triage for Check Point's VDP and BBP reports, including analyzing reports, calculating severities and communications with reporters. Define and develop security training to implement cross organization Be a first responder in security incidents, including leading and defining actions to resolution Manage and monitor Check Point's SCA, SAST, DAST tools Qualifications Proven ability to lead and influence leaders across the organization. In-depth knowledge of Secure Development Life Cycle (SDLC) processes, secure architecture, third-party tools, and security policies. Threat modeling & secure design - Ability to review architectures, identify abuse cases, and guide developers on secure design decisions early in the lifecycle. Expertise in identifying, analyzing, and mitigating security vulnerabilities, including familiarity with Common Vulnerabilities and Exposures (CVE) and the Common Vulnerability Scoring System (CVSS). Hands-on experience with AppSec tooling - SAST, DAST, SCA (e.g., SonarQube, Snyk, JFrog Xray), including tuning, triaging results, and integrating into CI/CD pipelines. Experience with vulnerability management and the ability to interpret and apply security standards, guidelines, and regulations. Proficiency in secure coding practices and the ability to conduct code reviews for security vulnerabilities. Familiarity with incident response processes, security monitoring, and threat intelligence. Offensive mindset - Ability to think like an attacker (manual testing, basic exploitation techniques) to validate real impact and reduce false positives. Advantage: Prior experience in software development. CP Department: Products - R&D Office Location: Tel-Aviv Career site Category: R&D

Responsibilities

Lead the security posture of R&D products by implementing the Secure Development Life Cycle and conducting architectural security reviews. Manage vulnerability reports from VDP and BBP programs while acting as a first responder for security incidents.