Endpoint Security Engineer, Technology

A Career with Point72's Technology Team

As Point72 reimagines the future of investing, our Technology team is constantly evolving our firm’s IT infrastructure and engineering capabilities, positioning us at the forefront of a rapidly evolving technology landscape. We’re a team of experts who experiment and work to discover new ways to harness open-source solutions, modern cloud architectures, and sophisticated Artificial Intelligence (AI) solutions, while embracing enterprise agile methodologies. Our commitment to building and innovating in the AI space provides the framework intended to drive smarter decision making and enhance how we build and operate our platforms and applications.

As a member of Point72’s Technology team, we encourage and support your professional development from day one—helping you advance your technical skills, contribute innovative ideas, and satisfy your own intellectual curiosity—all while delivering real business impact for our multi-billion-dollar global business.

WHAT YOU'LL DO

You will own endpoint protective controls across workstations, servers, virtual desktops, mobile devices, and browsers, helping keep our firm’s endpoint security posture measurable and resilient. Specifically, you will:

Administer endpoint detection and response platforms across the endpoint estate, including sensor deployment, prevention policies, host grouping, exclusions, custom indicators of attack, and response actions
Maintain sensor coverage across Windows, macOS, Linux, and virtual desktop environments by reconciling telemetry against asset inventory and closing coverage gaps
Manage endpoint protection and Windows security controls, including antivirus policy, attack surface reduction, tamper protection, vulnerability management, and coexistence settings
Govern the enterprise browser as an endpoint control surface, including policy enforcement, extension governance, data protection controls, and isolation for higher-risk destinations
Implement hardening baselines aligned to CIS Benchmarks through endpoint management platforms, with control-level evaluation, remediation, and compliance evidence
Engineer application control, device control, and host firewall policies from audit mode through measured enforcement across diverse endpoint populations
Detect and remediate configuration drift by verifying sensor status, policy assignment, baseline compliance, and other control-state telemetry
Manage endpoint security exceptions with documented justification, accountable ownership, expiry dates, and ongoing review to minimize persistent risk
Lead sensor and platform lifecycle management, including release evaluation, staged rollout planning, production deployment, and rollback readiness
Partner with security operations, infrastructure, and desktop engineering teams to tune detections, improve response actions, and deliver sprint commitments through verified control state

WHAT'S REQUIRED

5+ years of hands-on experience in endpoint security engineering within a production enterprise environment
Deep experience administering endpoint detection and response platforms, such as CrowdStrike Falcon, including sensor deployment across Windows, macOS, and Linux, prevention policy design, host groups, exclusions, response actions, and workflow automation
Experience using security platform APIs, such as the CrowdStrike API, for endpoint security automation, reporting, and control-state validation
Experience administering endpoint protection platforms, such as Microsoft Defender for Endpoint, through endpoint management security baselines and policies, including antivirus, attack surface reduction, tamper protection, and vulnerability management
Experience operating a native endpoint protection platform alongside a third-party endpoint detection and response platform, including coexistence and passive mode configuration
Working knowledge of endpoint security portals, such as Microsoft Defender, including advanced hunting with KQL for investigation, validation, and reporting