Senior Endpoint Security Engineer - AI-Driven Cloud Protect

Linuxconfig; New York (NY); On-site; USD 170,000 - 250,000; Full time

Benefits offered by this job

Fully-paid health care benefits

Generous parental and family leave

Volunteer opportunities

Affinity groups for women, people of色?

Job summary

Point72 is seeking an experienced Endpoint Security Engineer to join its Technology team in New York. You will administer CrowdStrike Falcon across Windows, macOS, and Linux, design and implement security policies, and automate security workflows to strengthen the firm’s AI-enabled IT infrastructure.

You will work with Defender for Endpoint baselines, CIS benchmarks, and collaborate with security operations to tune detections and drive sprint commitments, delivering robust protection across

Qualifications

• 5+ years hands-on endpoint security engineering in a production enterprise environment.
• Experience administering CrowdStrike Falcon across Windows, macOS, and Linux, including sensor deployment, policies, groups, exclusions, and response actions.
• Experience using CrowdStrike API for automation, reporting, and validation.
• Experience administering Defender for Endpoint through security baselines and policies, including antivirus and vulnerability management.
• Experience operating native and third‑party endpoint protection platforms in coexistence and passive mode.
• Familiarity with Defender and advanced hunting with KQL for investigation and reporting.
• Experience with endpoint management tools (Intune, Jamf, Group Policy) and CIS Benchmarks.
• Scripting in PowerShell, Python, or Bash and delivering sprint backlog items.
• Commitment to the highest ethical standards.

Responsibilities

• Administer endpoint detection and response platforms across the estate, including sensor deployment, policies, host grouping, exclusions, and response actions.
• Maintain sensor coverage across Windows, macOS, Linux, and VDI environments; reconcile telemetry with asset inventory and close gaps.
• Manage endpoint protection and Windows security controls, including antivirus, attack surface reduction, tamper protection, and vulnerability management.
• Implement CIS-aligned baselines through endpoint management platforms with evaluation, remediation, and evidence.
• Engineer application and device control policies from audit to enforcement across endpoint populations.
• Detect and remediate configuration drift by verifying sensor status, policy assignment, and baseline compliance.
• Manage endpoint security exceptions with justification, ownership, expiry dates, and review cadence.
• Lead sensor/platform lifecycle management, including rollout planning, production deployment, and rollback readiness.
• Collaborate with security operations, infrastructure, and desktop teams to tune detections and meet sprint commitments.

Skills

PowerShell

Python

Bash

Windows

macOS

Linux

KQL

Intune

Jamf

Group Policy

Security engineering

Tools

CrowdStrike Falcon

Microsoft Defender for Endpoint

CrowdStrike API

Intune

Jamf

Group Policy

Job description

Point72 is seeking an experienced Endpoint Security Engineer to join its Technology team in New York. You will administer CrowdStrike Falcon across Windows, macOS, and Linux, design and implement security policies, and automate security workflows to strengthen the firm’s AI-enabled IT infrastructure.

You will work with Defender for Endpoint baselines, CIS benchmarks, and collaborate with security operations to tune detections and drive sprint commitments, delivering robust protection across