Threat and Vulnerability Management Engineer

Point72 Asset Management, L.P; Hinoba-an; On-site; PHP 900,000 - 1,300,000; Full time

Job summary

Point72 seeks a security-focused professional to advance its vulnerability management program across modern cloud environments. You will discover, prioritize, remediate, and report on risks, partnering with infrastructure, cloud, and development teams to drive timely action.

You will engineer automation to streamline workflows, strengthen data quality, and reduce manual effort while maintaining robust risk-based remediation in a global technology landscape.

Qualifications

• Hands-on responsibility for threat and vulnerability management in enterprise tech environments.
• Experience maturing vulnerability management programs: discovery, prioritization, remediation tracking, reporting.
• Experience securing cloud environments: vulnerability assessment, misconfiguration analysis, remediation coordination.
• Hands-on container security: image scanning, runtime risk assessment, remediation in containerized environments.
• Strong automation and scripting skills to integrate security data and streamline workflows.
• Understanding of vulnerability severity, exploitability, asset criticality, attack paths and risk-based remediation.

Responsibilities

• Shape the evolution of the vulnerability management program by improving discovery, prioritization, remediation, and measurement across environments.
• Automate vulnerability workflows to reduce manual effort and accelerate remediation.
• Assess vulnerabilities across cloud, container, server, endpoint, and app environments to drive timely remediation.
• Collaborate with infrastructure, cloud, development, and security teams to translate findings into remediation plans.
• Develop risk-based prioritization considering exploitability, asset criticality, exposure and business context.
• Refine scanning processes to improve container and cloud vulnerability coverage and provide remediation feedback.
• Create dashboards and reports showing trends, remediation progress, and gaps for leadership.
• Investigate emerging threats and coordinate responses across teams.
• Document standards and guidance for managing vulnerabilities throughout the lifecycle.

Skills

vulnerability management

cloud security

container security

automation scripting

risk assessment

Job description

A Career with Point72's Technology Team

As Point72 reimagines the future of investing, our Technology team is constantly evolving our firm’s IT infrastructure and engineering capabilities, positioning us at the forefront of a rapidly evolving technology

landscape. We’re a team of experts who experiment and work to discover new ways to harness open source solutions, modern cloud architectures, and sophisticated Artificial Intelligence (AI) solutions, while embracing enterprise agile methodologies. Our commitment to building and innovating in the AI space provides the framework intended to drive smarter decision making and enhance how we build and operate our platforms and applications.

As a member of Point72’s Technology team, we encourage and support your professional development from day one—helping you advance your technical skills, contribute innovative ideas, and satisfy your own intellectual curiosity—all while delivering real business impact for our multi-billion-dollar global business.

WHAT YOU'LL DO

You will help advance Point72’s vulnerability management program across a modern, cloud-enabled technology environment, turning security findings into measurable risk reduction. Specifically, you will:

• Shape the evolution of Point72’s vulnerability management program by improving how teams discover, prioritize, remediate, and measure risks across technology environments
• Engineer automation that reduces manual vulnerability workflows, accelerates remediation, and improves the quality of security data used by teams and leaders
• Assess vulnerabilities across cloud, container, server, endpoint, and application environments to identify material risks and drive timely remediation
• Partner with infrastructure, cloud, development, and security teams to translate findings into clear remediation plans that align with production realities
• Develop risk-based prioritization methods that account for exploitability, asset criticality, exposure, and business context
• Improve container and cloud vulnerability coverage by refining scanning processes, integration points, and remediation feedback loops
• Create dashboards and reports that show vulnerability trends, remediation progress, control gaps, and areas requiring leadership attention
• Investigate emerging threats and vulnerability disclosures to determine potential exposure and coordinate response actions across affected teams
• Document standards, processes, and technical guidance that help teams consistently manage vulnerabilities throughout the technology lifecycle

WHAT'S REQUIRED

• Professional experience in information security, with hands-on responsibility for threat and vulnerability management in enterprise technology environments
• Demonstrated experience maturing a vulnerability management program, including discovery, prioritization, remediation tracking, exception handling, and management reporting
• Hands-on experience securing cloud-based environments, including vulnerability assessment, misconfiguration analysis, exposure review, and remediation coordination
• Hands-on experience with container security, including image scanning, runtime risk assessment, and vulnerability remediation in containerized environments
• Strong automation and scripting skills for integrating security data, improving workflows, and reducing manual operational effort
• Solid understanding of vulnerability severity, exploitability, asset criticality, attack paths, and risk-based remediation approaches
• Ability to analyze security findings, validate risk, identify false positives, and communicate practical remediation guidance to technical teams
• Strong collaboration and ownership skills, with the ability to drive remediation across technology stakeholders in a global environment
• Excellent written and verbal English communication skills for reporting risk, explaining technical issues, and influencing remediation outcomes
• Commitment to the highest ethical standards

WE TAKE CARE OF OUR PEOPLE

• Health care benefits
• Maternity, Adoption & related leave policies
• Generous paternity and family care leave policies
• Employee Assistance Program & Mental wellness programs
• Transportation support
• Tuition assistance

ABOUT POINT72

Point72 is a leading global alternative investment firm led by Steven A. Cohen. Building on more than 30 years of investing experience, Point72 seeks to deliver superior returns for its investors through

fundamental and systematic investing strategies across asset classes and geographies. We aim to attract and retain the industry's brightest talent by cultivating an investor-led culture and committing to

our people's long-term growth. For more information, visit https://point72.com/.