Senior Data Protection Engineer

Cubist (Point72); New York (NY); On-site; USD 180,000 - 250,000; Full time

Benefits offered by this job

Health benefits

Parental leave

Family leave

Volunteer opportunities

Affinity groups

Wellness programs

Tuition assistance

401(k) match

Job summary

Point72 is seeking a Data Security Engineer to own data protection across workplace and cloud environments. You will design DLP controls, deploy policies, and build classifiers while managing least-privilege access and governance.

The role requires strong scripting skills, experience with Purview, and familiarity with CASBs and cloud storage security. The team emphasizes enterprise-grade security, AI-enabled decision support, and rigorous change control.

Qualifications

• 5+ years in security engineering
• 3+ years focused on data protection or DLP
• Hands-on with data protection platforms (Microsoft Purview)
• Administer data protection across on-prem and cloud stores
• Enforce DLP via secure web gateways and CASBs
• Secure cloud collaboration/storage (Box/SharePoint Online/OneDrive)
• Scripting in PowerShell or Python with APIs
• Knowledge of data classification frameworks/regulatory requirements
• Commitment to high ethical standards

Responsibilities

• Design and operate data loss prevention controls across endpoints, email, and cloud storage
• Deploy data protection policies across email, files, and endpoints
• Build and maintain classification taxonomy and trainable classifiers
• Administer data access governance and least-privilege remediation
• Extend protection to databases and SaaS data stores
• Integrate egress controls with secure web gateway and CASB
• Tune policies to reduce false positives while preserving coverage
• Automate policy deployment and remediation via scripts and APIs
• Maintain policy documentation and change control

Skills

Security engineering

Data protection

Microsoft Purview

DLP platforms

Scripting PowerShell/Python

Cloud security

Box/SharePoint/OneDrive security

Microsoft 365 knowledge

Microsoft Graph API

Regulatory compliance knowledge

Ethical standards

Tools

Microsoft Purview

Zscaler

Palo Alto Networks

Netskope

Box

SharePoint Online

OneDrive

Microsoft 365

Microsoft Graph

Job description

Point72 is seeking a Data Security Engineer to own data protection across workplace and cloud environments. You will design DLP controls, deploy policies, and build classifiers while managing least-privilege access and governance.

The role requires strong scripting skills, experience with Purview, and familiarity with CASBs and cloud storage security. The team emphasizes enterprise-grade security, AI-enabled decision support, and rigorous change control.