{"id":4072627,"url":"https://alion.io/job/point72-endpoint-security-engineer-technology","title":"Endpoint Security Engineer, Technology","company":{"id":3801,"name":"Point72","domain":"point72.com","url":"https://alion.io/company/point72","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":true,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":77,"open_postings":159,"ghost_share":0.308,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":137,"computed_at":"2026-11-11T05:49:22Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["New York, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":170000,"max":250000,"currency":"USD","period":"year","gross":null,"usd_annual":250000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agile","optional":false},{"name":"Bash","optional":false},{"name":"CIS Benchmarks","optional":false},{"name":"Crowdstrike","optional":false},{"name":"Linux","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-11-11T12:45:30Z","employer_posted_date":"2026-11-11","last_verified_at":"2026-11-11T14:07:12Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Endpoint Security Engineer, Technology\nA Career with Point72's Technology Team\nAs Point72 reimagines the future of investing, our Technology team is constantly evolving our firm’s IT infrastructure and engineering capabilities, positioning us at the forefront of a rapidly evolving technology landscape. We’re a team of experts who experiment and work to discover new ways to harness open-source solutions, modern cloud architectures, and sophisticated Artificial Intelligence (AI) solutions, while embracing enterprise agile methodologies. Our commitment to building and innovating in the AI space provides the framework intended to drive smarter decision making and enhance how we build and operate our platforms and applications.\nAs a member of Point72’s Technology team, we encourage and support your professional development from day one-helping you advance your technical skills, contribute innovative ideas, and satisfy your own intellectual curiosity-all while delivering real business impact for our multi-billion-dollar global business.\nWHAT YOU'LL DO\nYou will own endpoint protective controls across workstations, servers, virtual desktops, mobile devices, and browsers, helping keep our firm’s endpoint security posture measurable and resilient. Specifically, you will:\nAdminister endpoint detection and response platforms across the endpoint estate, including sensor deployment, prevention policies, host grouping, exclusions, custom indicators of attack, and response actions\nMaintain sensor coverage across Windows, macOS, Linux, and virtual desktop environments by reconciling telemetry against asset inventory and closing coverage gaps\nManage endpoint protection and Windows security controls, including antivirus policy, attack surface reduction, tamper protection, vulnerability management, and coexistence settings\nGovern the enterprise browser as an endpoint control surface, including policy enforcement, extension governance, data protection controls, and isolation for higher-risk destinations\nImplement hardening baselines aligned to CIS Benchmarks through endpoint management platforms, with control-level evaluation, remediation, and compliance evidence\nEngineer application control, device control, and host firewall policies from audit mode through measured enforcement across diverse endpoint populations\nDetect and remediate configuration drift by verifying sensor status, policy assignment, baseline compliance, and other control-state telemetry\nManage endpoint security exceptions with documented justification, accountable ownership, expiry dates, and ongoing review to minimize persistent risk\nLead sensor and platform lifecycle management, including release evaluation, staged rollout planning, production deployment, and rollback readiness\nPartner with security operations, infrastructure, and desktop engineering teams to tune detections, improve response actions, and deliver sprint commitments through verified control state\nWHAT'S REQUIRED\n5+ years of hands-on experience in endpoint security engineering within a production enterprise environment\nDeep experience administering endpoint detection and response platforms, such as CrowdStrike Falcon, including sensor deployment across Windows, macOS, and Linux, prevention policy design, host groups, exclusions, response actions, and workflow automation\nExperience using security platform APIs, such as the CrowdStrike API, for endpoint security automation, reporting, and control-state validation\nExperience administering endpoint protection platforms, such as Microsoft Defender for Endpoint, through endpoint management security baselines and policies, including antivirus, attack surface reduction, tamper protection, and vulnerability management\nExperience operating a native endpoint protection platform alongside a third-party endpoint detection and response platform, including coexistence and passive mode configuration\nWorking knowledge of endpoint security portals, such as Microsoft Defender, including advanced hunting with KQL for investigation, validation, and reporting\nExperience deploying and operating enterprise browser security controls, including policy design, extension governance, download and upload controls, and browser-layer data protection\nExperience with endpoint management tools, such as Microsoft Intune, Jamf, and Group Policy, as well as CIS Benchmarks, application control, device control, and audit-to-enforcement rollout of endpoint policies\nExperience supporting virtual desktop or thin client environments, scripting in PowerShell, Python, or Bash, and delivering sprint backlog items through verified completion\nCommitment to the highest ethical standards\nWE TAKE CARE OF OUR PEOPLE\nWe invest in our people, their careers, their health, and their well-being. When you work here, we provide:\nFully-paid health care benefits\nGenerous parental and family leave policies\nVolunteer opportunities\nSupport for employee-led affinity groups representing women, people of color and the LGBT+ community\nMental and physical wellness programs\nTuition assistance\nA 401(k) savings program with an employer match and more\n\nABOUT POINT72\nPoint72 is a leading global alternative investment firm led by Steven A. Cohen. Building on more than 30 years of investing experience, Point72 seeks to deliver superior returns for its investors through fundamental and systematic investing strategies across asset classes and geographies. We aim to attract and retain the industry's brightest talent by cultivating an investor-led culture and committing to our people's long-term growth. For more information, visit https://point72.com/.\nThe annual base salary range for this role is $170,000-$250,000 (USD) , which does not include discretionary bonus compensation or our comprehensive benefits package. Actual compensation offered to the successful candidate may vary from posted hiring range based upon geographic location, work experience, education, and/or skill level, among other things.","description_format":"text","description_chars":5999,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Parental leave","Professional development","Wellness"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Endpoint Security","Vulnerability Management","Venture Capital","Hedge Funds & Alternative Investments"],"lifecycle":[{"event":"open","at":"2026-11-11T14:07:12Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 83 · green card filings: 20","filings_12m":83,"filings_prev_12m":45,"green_card_filings_12m":20,"median_offered_wage_usd":214733,"route":null,"cap_exempt":false,"checked_at":"2026-11-11T07:38:50+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":2}],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":138,"reasons":["conf:2","win:early","comp:brand"],"computed_at":"2026-11-11T16:41:06Z"},"pay":{"stated_usd_annual":250000,"is_top_pay":true},"html_url":"https://alion.io/job/point72-endpoint-security-engineer-technology","json_url":"https://alion.io/job/point72-endpoint-security-engineer-technology.json","meta":{"generated_at":"2026-11-11T16:41:06Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":31633,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-12T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3801},"rest":"https://alion.io/mcp/rest/get_company?id=3801"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fpoint72-endpoint-security-engineer-technology"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fpoint72-endpoint-security-engineer-technology"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fpoint72-endpoint-security-engineer-technology"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/point72-endpoint-security-engineer-technology\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fpoint72-endpoint-security-engineer-technology"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4072627}},{"tool":"search_jobs","arguments":{"company":"point72.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4072627},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}