Endpoint Security Engineer, Technology

Point72; New York (NY); On-site; USD 170,000 - 250,000; Full time

Job summary

Point72's Technology team seeks an Endpoint Security Engineer to own and manage endpoint protective controls across the organization's diverse infrastructure. You will administer EDR platforms, implement hardening baselines, and ensure a resilient security posture on workstations, servers, VDI, mobile devices, and browsers.

You will collaborate with security operations, infrastructure, and desktop teams to tune detections, remediate configuration drift, and deliver key sprint commitments while

Qualifications

• 5+ years of hands-on experience in endpoint security engineering within a production enterprise.

Responsibilities

• Administer endpoint detection and response platforms across the endpoint estate, including sensor deployment, prevention policies, host grouping, exclusions, custom indicators of attack, and response actions.

Skills

Endpoint security engineering

CrowdStrike Falcon

Defender for Endpoint

PowerShell

Python

Bash

Security APIs

CIS Benchmarks

SCCM/Policies

Threat hunting

Tools

CrowdStrike Falcon

Microsoft Defender for Endpoint

Microsoft Intune

Jamf

Group Policy

CrowdStrike API

Job description

Point72's Technology team is seeking an Endpoint Security Engineer to own and manage endpoint protective controls across the organization's diverse infrastructure. This role focuses on administering endpoint detection and response platforms, maintaining security policies, and ensuring resilient endpoint security posture across workstations, servers, virtual desktops, mobile devices, and browsers.

What You'll Do

• Administer endpoint detection and response platforms across the endpoint estate, including sensor deployment, prevention policies, host grouping, exclusions, custom indicators of attack, and response actions
• Maintain sensor coverage across Windows, macOS, Linux, and virtual desktop environments by reconciling telemetry against asset inventory and closing coverage gaps
• Manage endpoint protection and Windows security controls, including antivirus policy, attack surface reduction, tamper protection, vulnerability management, and coexistence settings
• Implement hardening baselines aligned to CIS Benchmarks through endpoint management platforms with control-level evaluation, remediation, and compliance evidence
• Detect and remediate configuration drift by verifying sensor status, policy assignment, baseline compliance, and control-state telemetry
• Partner with security operations, infrastructure, and desktop engineering teams to tune detections, improve response actions, and deliver sprint commitments through verified control state

What You Need

• 5+ years of hands-on experience in endpoint security engineering within a production enterprise environment
• Deep experience administering endpoint detection and response platforms such as CrowdStrike Falcon, including sensor deployment across Windows, macOS, and Linux
• Experience administering endpoint protection platforms such as Microsoft Defender for Endpoint through security baselines and policies
• Experience operating a native endpoint protection platform alongside a third-party endpoint detection and response platform
• Experience with endpoint management tools such as Microsoft Intune, Jamf, and Group Policy, as well as CIS Benchmarks and application control
• Experience supporting virtual desktop or thin client environments, scripting in PowerShell, Python, or Bash
• Working knowledge of security platform APIs such as the CrowdStrike API for endpoint security automation, reporting, and control-state validation
• Commitment to the highest ethical standards

Nice to Have

• Experience deploying and operating enterprise browser security controls, including policy design, extension governance, and browser-layer data protection
• Advanced hunting with KQL in Microsoft Defender for investigation, validation, and reporting
• Linux system administration knowledge

Annual base salary $170,000–$250,000 USD, plus discretionary bonus compensation and comprehensive benefits package including fully-paid health care, generous parental and family leave, volunteer opportunities, mental and physical wellness programs, tuition assistance, and 401(k) with employer match