Data Security Engineer

Point72; New York (NY); On-site; USD 180,000 - 250,000; Full time

Benefits offered by this job

Fully-paid health care benefits

Parental and family leave policies

Mental and physical wellness programs

Volunteer opportunities

401(k) with employer match

Job summary

Point72’s Technology team is transforming its IT infrastructure, embracing open-source solutions, cloud architectures, and AI-driven platforms to empower smarter decision making in a multi-billion-dollar global business. As a Security Engineer, you will own the control estate for Infrastructure Security, implementing DLP, labeling, and data access governance across on-prem and cloud data stores.

You will work with colleagues to extend coverage to databases and SaaS apps, while automating policy

Qualifications

• 5+ years in security engineering with focus on data protection or DLP
• Hands-on experience with data protection platforms and policies
• Experience with endpoints, cloud storage, and collaboration platforms
• Experience with secure web gateways and CASB tools
• Knowledge of data classification frameworks and regulatory requirements
• Commitment to high ethical standards

Responsibilities

• Design and operate enterprise DLP controls across endpoints, email, and cloud storage
• Deploy data protection policies across email, storage, and endpoints
• Maintain classification taxonomy, sensitivity labels, auto-labeling rules, and trainable classifiers
• Administer data access governance and least-privilege remediation
• Extend protection to databases, SaaS apps, and cloud object storage
• Integrate egress controls with secure gateways and CASB solutions
• Tune policies to reduce false positives while preserving coverage
• Operate incident workflows for alert triage and evidence retention
• Automate policy deployment and remediation via scripting and APIs
• Maintain data protection standards and change control

Skills

Security engineering

Data protection

Data loss prevention

Scripting

Cloud security

Tools

Microsoft Purview

PowerShell

Python

Job description

As Point72 reimagines the future of investing, our Technology team is constantly evolving our firm’s IT infrastructure and engineering capabilities, positioning us at the forefront of a rapidly evolving technology landscape. We’re a team of experts who experiment and work to discover new ways to harness open-source solutions, modern cloud architectures, and sophisticated Artificial Intelligence (AI) solutions, while embracing enterprise agile methodologies. Our commitment to building and innovating in the AI space provides the framework intended to drive smarter decision making and enhance how we build and operate our platforms and applications.

As a member of Point72’s Technology team, we encourage and support your professional development from day one—helping you advance your technical skills, contribute innovative ideas, and satisfy your own intellectual curiosity—all while delivering real business impact for our multi-billion-dollar global business.

What you’ll do

You will shape how the firm identifies, protects, and governs sensitive data across workplace and cloud environments. You will have hands-on ownership of the control estate within Infrastructure Security, reporting to the Head of Infrastructure Security. Specifically, you will:

• Design and operate enterprise data loss prevention controls across endpoints, email, collaboration platforms, and cloud storage
• Deploy data protection policies across email, file storage, collaboration platforms, and endpoint devices
• Build and maintain the classification taxonomy, sensitivity labels, auto-labeling rules, sensitive information types, and trainable classifiers that improve policy matching
• Administer data access governance controls that identify overexposed, stale, and sensitive data and support least-privilege remediation
• Extend classification and protection coverage to databases, SaaS applications, and cloud object storage
• Integrate egress enforcement with secure web gateway, cloud access security broker, and collaboration platform access controls
• Tune policies using telemetry to reduce false positives while preserving detection coverage across communication and storage channels
• Operate incident workflows for alert triage, user notification, security escalation, and evidence retention
• Automate policy deployment, reporting, and remediation through scripting and APIs
• Maintain data protection standards, policy documentation, and change control for classification and data loss prevention changes

What’s required

• 5+ years in security engineering, including 3+ years focused on data protection or data loss prevention
• Hands-on experience deploying and operating data protection platforms, such as Microsoft Purview, including sensitivity labels, auto-labeling, policies, sensitive information types, trainable classifiers, and endpoint controls
• Hands-on experience administering a data protection platform covering permissions analysis, classification, alerting, and automated remediation across on-premises and cloud data stores
• Experience enforcing data loss prevention through secure web gateways and cloud access security brokers, such as Zscaler, Palo Alto Networks, or Netskope
• Experience securing cloud collaboration and storage platforms, such as Box, SharePoint Online, and OneDrive, with native access policies and external sharing controls
• Working knowledge of productivity suite administration, such as Microsoft 365, across Exchange Online, SharePoint Online, OneDrive, and Teams
• Scripting ability in PowerShell or Python, including experience with platform and vendor APIs, such as Microsoft Graph
• Experience securing structured data through database activity monitoring, database classification, or SaaS data protection
• Understanding of data classification frameworks and regulatory requirements relevant to financial services, with experience delivering sprint backlog items through verified completion and cross-team collaboration
• Commitment to the highest ethical standards

We take care of our people

We invest in our people, their careers, their health, and their well-being. When you work here, we provide:

• Fully-paid health care benefits
• Generous parental and family leave policies
• Mental and physical wellness programs
• Volunteer opportunities
• Non-profit matching gift program
• Support for employee-led affinity groups representing women, minorities and the LGBT+ community
• Tuition assistance
• A 401(k) savings program with an employer match and more

About Point72

Point72 Asset Management is a global firm led by Steven Cohen that invests in multiple asset classes and strategies worldwide. Resting on more than a quarter-century of investing experience, we seek to be the industry’s premier asset manager through delivering superior risk-adjusted returns, adhering to the highest ethical standards, and offering the greatest opportunities to the industry’s brightest talent. We’re inventing the future of finance by revolutionizing how we develop our people and how we use data to shape our thinking. For more information, visit www.Point72.com/working-here

The annual base salary range for this role is $180,000-$250,000 (USD) , which does not include discretionary bonus compensation or our comprehensive benefits package. Actual compensation offered to the successful candidate may vary from posted hiring range based upon geographic location, work experience, education, and/or skill level, among other things.