Data Security Engineer

Point72 • New York, NY

7h • $180,000 - $250,000

About The Position

As a member of Point72’s Technology team, the Data Security Engineer will shape how the firm identifies, protects, and governs sensitive data across workplace and cloud environments. The role has hands-on ownership of the data protection control estate within Infrastructure Security and reports to the Head of Infrastructure Security.

The engineer will design and operate data loss prevention and data protection controls across endpoints, email, collaboration platforms, cloud storage, databases, SaaS applications, and cloud object storage. The role includes developing classification and sensitivity-labeling capabilities, administering data access governance, integrating egress enforcement, tuning policies based on telemetry, operating incident workflows, and automating deployment, reporting, and remediation. The engineer will also maintain data protection standards, policy documentation, and change control for classification and data loss prevention changes.

Point72’s Technology team works with open-source solutions, modern cloud architectures, AI solutions, and enterprise agile methodologies. The firm supports professional development and encourages employees to build technical skills, contribute ideas, and deliver business impact.

Requirements

• At least 5 years of experience in security engineering, including at least 3 years focused on data protection or data loss prevention.
• Hands-on experience deploying and operating data protection platforms such as Microsoft Purview, including sensitivity labels, auto-labeling, policies, sensitive information types, trainable classifiers, and endpoint controls.
• Hands-on experience administering a data protection platform covering permissions analysis, classification, alerting, and automated remediation across on-premises and cloud data stores.
• Experience enforcing data loss prevention through secure web gateways and cloud access security brokers.
• Experience securing cloud collaboration and storage platforms, such as Box, SharePoint Online, and OneDrive, using native access policies and external sharing controls.
• Working knowledge of productivity suite administration, such as Microsoft 365, across Exchange Online, SharePoint Online, OneDrive, and Teams.
• Scripting ability in PowerShell or Python, including experience with platform and vendor APIs such as Microsoft Graph.
• Understanding of data classification frameworks and regulatory requirements relevant to financial services.
• Experience delivering sprint backlog items through verified completion and collaborating across teams.
• Commitment to the highest ethical standards.

Responsibilities

• Design and operate enterprise data loss prevention controls across endpoints, email, collaboration platforms, and cloud storage.
• Deploy data protection policies across email, file storage, collaboration platforms, and endpoint devices.
• Build and maintain classification taxonomies, sensitivity labels, auto-labeling rules, sensitive information types, and trainable classifiers.
• Administer data access governance controls to identify overexposed, stale, and sensitive data and support least-privilege remediation.
• Extend classification and protection coverage to databases, SaaS applications, and cloud object storage.
• Integrate egress enforcement with secure web gateways, cloud access security brokers, and collaboration platform access controls.
• Tune policies using telemetry to reduce false positives while preserving detection coverage across communication and storage channels.
• Operate incident workflows for alert triage, user notification, security escalation, and evidence retention.
• Automate policy deployment, reporting, and remediation through scripting and APIs.
• Maintain data protection standards, policy documentation, and change control for classification and data loss prevention changes.

Benefits

• Fully paid health care benefits
• Generous parental and family leave policies
• Volunteer opportunities
• Support for employee-led affinity groups representing women, people of color, and the LGBT+ community
• Mental and physical wellness programs
• Tuition assistance
• A 401(k) savings program with an employer match

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed