A natural match if you have hands-on data loss prevention experience and a background in financial services.
Derived from job-description analysis by Serendipath's career intelligence engine.
Original posting from Point72 via Greenhouse
Data Security Engineer
A Career with Point72's Technology Team
As Point72 reimagines the future of investing, our Technology team is constantly evolving our firm’s IT infrastructure and engineering capabilities, positioning us at the forefront of a rapidly evolving technology landscape. We’re a team of experts who experiment and work to discover new ways to harness open-source solutions, modern cloud architectures, and sophisticated Artificial Intelligence (AI) solutions, while embracing enterprise agile methodologies. Our commitment to building and innovating in the AI space provides the framework intended to drive smarter decision making and enhance how we build and operate our platforms and applications.
As a member of Point72’s Technology team, we encourage and support your professional development from day one—helping you advance your technical skills, contribute innovative ideas, and satisfy your own intellectual curiosity—all while delivering real business impact for our multi-billion-dollar global business.
WHAT YOU'LL DO
You will shape how the firm identifies, protects, and governs sensitive data across workplace and cloud environments. You will have hands-on ownership of the control estate within Infrastructure Security, reporting to the Head of Infrastructure Security. Specifically, you will:
Design and operate enterprise data loss prevention controls across endpoints, email, collaboration platforms, and cloud storage
Deploy data protection policies across email, file storage, collaboration platforms, and endpoint devices
Build and maintain the classification taxonomy, sensitivity labels, auto-labeling rules, sensitive information types, and trainable classifiers that improve policy matching
Administer data access governance controls that identify overexposed, stale, and sensitive data and support least-privilege remediation
Extend classification and protection coverage to databases, SaaS applications, and cloud object storage
Integrate egress enforcement with secure web gateway, cloud access security broker, and collaboration platform access controls
Tune policies using telemetry to reduce false positives while preserving detection coverage across communication and storage channels
Operate incident workflows for alert triage, user notification, security escalation, and evidence retention
Automate policy deployment, reporting, and remediation through scripting and APIs
Maintain data protection standards, policy documentation, and change control for classification and data loss prevention changes
WHAT'S REQUIRED
5+ years in security engineering, including 3+ years focused on data protection or data loss prevention
Hands-on experience deploying and operating data protection platforms, such as Microsoft Purview, including sensitivity labels, auto-labeling, policies, sensitive information types, trainable classifiers, and endpoint controls
Hands-on experience administering a data protection platform covering permissions analysis, classification, alerting, and automated remediation across on-premises and cloud data stores
Experience enforcing data loss prevention through secure web gateways and cloud access security brokers, such as Zscaler, Palo Alto Networks, or Netskope
Experience securing cloud collaboration and storage platforms, such as Box, SharePoint Online, and OneDrive, with native access policies and external sharing controls
Working knowledge of productivity suite administration, such as Microsoft 365, across Exchange Online, SharePoint Online, OneDrive, and Teams
Scripting ability in PowerShell or Python, including experience with platform and vendor APIs, such as Microsoft Graph
Experience securing structured data through database activity monitoring, database classification, or SaaS data protection
Understanding of data classification frameworks and regulatory requirements relevant to financial services, with experience delivering sprint backlog items through verified completion and cross-team collaboration
Commitment to the highest ethical standards
WE TAKE CARE OF OUR PEOPLE
We invest in our people, their careers, their health, and their well-being. When you work here, we provide:
Fully-paid health care benefits
Generous parental and family leave policies
Volunteer opportunities
Support for employee-led affinity groups representing women, people of color and the LGBT+ community
Mental and physical wellness programs
Tuition assistance
A 401(k) savings program with an employer match and more
ABOUT POINT72
Point72 is a leading global alternative investment firm led by Steven A. Cohen. Building on more than 30 years of investing experience, Point72 seeks to deliver superior returns for its investors through fundamental and systematic investing strategies across asset classes and geographies. We aim to attract and retain the industry's brightest talent by cultivating an investor-led culture and committing to our people's long-term growth. For more information, visit https://point72.com/.
The annual base salary range for this role is $180,000-$250,000 (USD) , which does not include discretionary bonus compensation or our comprehensive benefits package. Actual compensation offered to the successful candidate may vary from posted hiring range based upon geographic location, work experience, education, and/or skill level, among other things.
Source: Point72 careers (Greenhouse)