AI Security Engineer, AI Security Unit

Check Point Software protects organizations worldwide from cyber and AI-driven threats across hybrid networks, cloud environments, digital workspaces, and AI systems. The AI Security Engineer will join the Red Team to deliver AI red teaming assessments, engage with enterprise clients, and develop scalable testing tools and methodologies. The role also involves researching emerging AI attack surfaces and translating security research into practical assessment approaches.

Responsibilities:

• Deliver AI red teaming security assessments for enterprise customers
• Collaborate with clients to scope projects, define testing requirements, and establish success criteria
• Conduct comprehensive security assessments of AI systems, including text-based LLM applications and multimodal agentic systems
• Extend testing to tools, APIs, and services these AI systems connect to
• Test manually and creatively beyond automated coverage to find the failures that tooling misses
• Author detailed security assessment reports with actionable findings and remediation recommendations
• Present findings and strategic recommendations to technical and executive stakeholders through report readouts and Q&A sessions
• Build upon and improve our established processes and playbooks to scale AI red teaming service delivery
• Develop frameworks to ensure consistent, high-quality service delivery
• Find tedious, repetitive tasks and automate them. You don't need to be a world-class developer—just someone who can build tools that make the team more effective. The goal is to automate routine work to free up time for targeted manual testing, not replace it
• Develop novel red teaming methodologies for emerging modalities: image, video, audio, autonomous systems
• Stay ahead of the latest AI security threats, attack vectors, and defense mechanisms
• Translate cutting-edge academic and industry research into practical testing approaches
• Collaborate with our research and product teams to continuously level up our methodologies

Requirements:

• Demonstrated offensive security experience shown through red teaming, penetration testing, security assessments, bug bounty programs, and/or CTF participation
• Demonstrated ability to find and exploit real vulnerabilities by hand, not only by running tools
• Strong knowledge of web application, API, and network security fundamentals
• Deep understanding of LLM vulnerabilities including direct and indirect prompt injection, jailbreaking, data poisoning, agentic and tool-use risks
• Practical experience with threat modeling complex systems and architectures
• Proficiency in developing automated tooling to enable and enhance testing capabilities, improve workflows, and deliver deeper insights
• Proven track record of contributing to or leading client-facing security assessment projects from scoping through delivery
• Excellent technical writing skills with experience creating executive-level security reports
• Strong presentation and communication skills, with the ability to clearly explain assessment findings and answer customer questions
• Experience or interest building processes, documentation, and tooling for service delivery teams
• Understanding of AI/ML model architectures, training processes, and deployment patterns
• Familiarity with AI security frameworks such as the OWASP Top 10 for LLM Applications, the OWASP Top 10 for Agentic Applications, and MITRE ATLAS
• Knowledge of emerging AI attack surfaces including multimodal systems and AI agents, and the tool and Model Context Protocol (MCP) integrations around them
• Relevant security certifications (OSCP, OSWA, OSAI, COAE, BSCP, etc.)
• Professional web application, API, or network penetration testing experience
• Hands-on experience performing AI red teaming assessments, with a strong plus for experience targeting agentic systems
• Demonstrated experience designing LLM jailbreaks
• Active participation in security research and tooling communities
• Background in threat modeling and risk assessment frameworks
• Previous speaking experience at security conferences or industry events