Endpoint Security Engineer, Technology

Point72; New York (NY); On-site; USD 180,000 - 250,000; Full time

Benefits offered by this job

Health care coverage

Parental leave

Wellness programs

Volunteer opportunities

Matching gifts

Affinity groups support

Tuition assistance

401(k) employer match

Job summary

Point72 is seeking an experienced Endpoint Security Engineer to join its Technology team in New York. You will administer and optimize endpoint protection across Windows, macOS, Linux, and virtual desktop environments, deploying sensors and designing prevention policies with automation in mind.

The role requires 5+ years in enterprise endpoint security, deep expertise with CrowdStrike Falcon and Defender for Endpoint, and strong scripting skills (PowerShell, Python, Bash).

Qualifications

• 5+ years of hands-on endpoint security engineering in a production enterprise.
• Deep experience with CrowdStrike Falcon sensor deployment, policy design, and automation.
• Experience using CrowdStrike API for automation, reporting and validation.
• Experience with Microsoft Defender for Endpoint, baselines, and vulnerability management.
• Experience coexisting native and third-party endpoint protections.
• Knowledge of endpoint portals and advanced hunting using KQL.
• Proficiency with Intune, Jamf, and Group Policy for policy rollout.
• Scripting in PowerShell, Python, or Bash; ability to deliver sprint backlog items.

Responsibilities

• Administer endpoint detection and response platforms across Windows, macOS, Linux, and VDI.
• Maintain sensor coverage and reconcile telemetry with asset inventory.
• Manage endpoint protection policies: antivirus, attack surface reduction, tamper protection.
• Implement CIS Benchmark baselines and evidence of compliance.
• Engineer application and device control policies from audit to enforcement.
• Detect and remediate configuration drift via policy and telemetry checks.
• Manage endpoint security exceptions with documented ownership and expiry.
• Lead sensor/platform lifecycle management: rollout planning, deployment, rollback.
• Collaborate with security operations and infrastructure to tune detections and meet sprint goals.

Tools

CrowdStrike Falcon

Microsoft Defender for Endpoint

Microsoft Intune

Jamf

Group Policy

PowerShell

Python

Bash

KQL

Job description

As Point72 reimagines the future of investing, our Technology team is constantly evolving our firm’s IT infrastructure and engineering capabilities, positioning us at the forefront of a rapidly evolving technology landscape. We’re a team of experts who experiment and work to discover new ways to harness open-source solutions, modern cloud architectures, and sophisticated Artificial Intelligence (AI) solutions, while embracing enterprise agile methodologies. Our commitment to building and innovating in the AI space provides the framework intended to drive smarter decision making and enhance how we build and operate our platforms and applications.

As a member of Point72’s Technology team, we encourage and support your professional development from day one—helping you advance your technical skills, contribute innovative ideas, and satisfy your own intellectual curiosity—all while delivering real business impact for our multi-billion-dollar global business.

What you’ll do

• Administer endpoint detection and response platforms across the endpoint estate, including sensor deployment, prevention policies, host grouping, exclusions, custom indicators of attack, and response actions
• Maintain sensor coverage across Windows, macOS, Linux, and virtual desktop environments by reconciling telemetry against asset inventory and closing coverage gaps
• Manage endpoint protection and Windows security controls, including antivirus policy, attack surface reduction, tamper protection, vulnerability management, and coexistence settings
• Implement hardening baselines aligned to CIS Benchmarks through endpoint management platforms, with control-level evaluation, remediation, and compliance evidence
• Engineer application control, device control, and host firewall policies from audit mode through measured enforcement across diverse endpoint populations
• Detect and remediate configuration drift by verifying sensor status, policy assignment, baseline compliance, and other control-state telemetry
• Manage endpoint security exceptions with documented justification, accountable ownership, expiry dates, and ongoing review to minimize persistent risk
• Lead sensor and platform lifecycle management, including release evaluation, staged rollout planning, production deployment, and rollback readiness
• Partner with security operations, infrastructure, and desktop engineering teams to tune detections, improve response actions, and deliver sprint commitments through verified control state

What’s required

• 5+ years of hands-on experience in endpoint security engineering within a production enterprise environment
• Deep experience administering endpoint detection and response platforms, such as CrowdStrike Falcon, including sensor deployment across Windows, macOS, and Linux, prevention policy design, host groups, exclusions, response actions, and workflow automation
• Experience using security platform APIs, such as the CrowdStrike API, for endpoint security automation, reporting, and control-state validation
• Experience administering endpoint protection platforms, such as Microsoft Defender for Endpoint, through endpoint management security baselines and policies, including antivirus, attack surface reduction, tamper protection, and vulnerability management
• Experience operating a native endpoint protection platform alongside a third-party endpoint detection and response platform, including coexistence and passive mode configuration
• Working knowledge of endpoint security portals, such as Microsoft Defender, including advanced hunting with KQL for investigation, validation, and reporting
• Experience with endpoint management tools, such as Microsoft Intune, Jamf, and Group Policy, as well as CIS Benchmarks, application control, device control, and audit-to-enforcement rollout of endpoint policies
• Experience supporting virtual desktop or thin client environments, scripting in PowerShell, Python, or Bash, and delivering sprint backlog items through verified completion
• Commitment to the highest ethical standards

We take care of our people

We invest in our people, their careers, their health, and their well-being. When you work here, we provide:

• Fully-paid health care benefits
• Generous parental and family leave policies
• Mental and physical wellness programs
• Volunteer opportunities
• Non-profit matching gift program
• Support for employee-led affinity groups representing women, minorities and the LGBT+ community
• Tuition assistance
• A 401(k) savings program with an employer match and more

About Point72

Point72 Asset Management is a global firm led by Steven Cohen that invests in multiple asset classes and strategies worldwide. Resting on more than a quarter-century of investing experience, we seek to be the industry’s premier asset manager through delivering superior risk-adjusted returns, adhering to the highest ethical standards, and offering the greatest opportunities to the industry’s brightest talent. We’re inventing the future of finance by revolutionizing how we develop our people and how we use data to shape our thinking. For more information, visit www.Point72.com/working-here

The annual base salary range for this role is $180,000-$250,000 (USD) , which does not include discretionary bonus compensation or our comprehensive benefits package. Actual compensation offered to the successful candidate may vary from posted hiring range based upon geographic location, work experience, education, and/or skill level, among other things.