Data Security Engineer - DLP & Data Governance

Point72; New York (NY); On-site; USD 180,000 - 250,000; Full time

Benefits offered by this job

Fully-paid health care benefits

Generous parental and family leave

401(k) with employer match

Job summary

Point72, a leading global investment firm, is seeking a Data Security Engineer to shape how the firm identifies, protects, and governs sensitive data across workplace and cloud environments. You will own the control estate within Infrastructure Security, reporting to the Head of Infrastructure Security, and collaborate across teams to implement robust data protection and DLP strategies.

The role requires hands-on experience with Microsoft Purview, data labeling, policy enforcement, and

Qualifications

• 5+ years in security engineering, including 3+ years focused on data protection or data loss prevention.
• Hands-on experience deploying data protection platforms such as Microsoft Purview, including sensitivity labels, auto-labeling, policies, and trainable classifiers.
• Experience administering data protection across on-premises and cloud data stores.
• Experience securing data loss prevention via secure web gateways and CASBs (e.g., Zscaler, Palo Alto, Netskope).
• Experience securing cloud collaboration and storage platforms (Box, SharePoint Online, OneDrive, Teams).
• Knowledge of Microsoft 365 administration across Exchange Online, SharePoint Online, OneDrive, Teams.

Responsibilities

• Design and operate enterprise data loss prevention controls across endpoints, email, collaboration platforms, and cloud storage.
• Deploy data protection policies across email, file storage, collaboration platforms, and endpoints.
• Build and maintain classification taxonomy, sensitivity labels, auto-labeling rules, sensitive information types, and trainable classifiers.
• Administer data access governance controls that identify overexposed, stale, and sensitive data and support least‑privilege remediation.
• Extend coverage to databases, SaaS apps, and cloud object storage; integrate egress enforcement with secure web gateway, CASB, and collaboration access controls.
• Tune policies using telemetry to reduce false positives while preserving detection coverage.
• Operate incident workflows for alert triage, user notification, escalation, and evidence retention.
• Automate policy deployment, reporting, and remediation via scripting and APIs.
• Maintain data protection standards, policy documentation, and change control for DLP changes.

Skills

Security engineering

Data protection

Microsoft Purview

Cloud security

Scripting

Regulatory knowledge

Zscaler

CASB

Tools

PowerShell

Python

Microsoft Graph

Microsoft 365

Job description

Point72, a leading global investment firm, is seeking a Data Security Engineer to shape how the firm identifies, protects, and governs sensitive data across workplace and cloud environments. You will own the control estate within Infrastructure Security, reporting to the Head of Infrastructure Security, and collaborate across teams to implement robust data protection and DLP strategies.

The role requires hands-on experience with Microsoft Purview, data labeling, policy enforcement, and