Security Automation Lead

Leads security automation engineering at Point72, building the single, auditable pipeline through which the firm's security controls are written, reviewed, tested and deployed. The role manages people, running the team's hiring, coaching and two-week sprint cycle, and is moving the work from manual tasks performed by contractors to automation owned by engineers.

Technically, the lead builds engines that detect and correct drift across endpoint, identity, cloud and vulnerability management tooling, replaces console changes with version-controlled infrastructure as code and configuration management, and runs CI/CD pipelines with linting, policy-as-code checks, validation gates and promotion steps. The team also builds observability that exposes control failures and deployment health, and hardens container and Kubernetes workloads through image scanning, admission control, runtime policy and namespace isolation. Progress is tracked through measures such as toil reduction, bypass and change failure rates, time to fix drift and sprint predictability, which feed postmortems and improvement work.

Point72 wants a record of running security automation pipelines in production, hands-on Terraform, CloudFormation or Pulumi, CI/CD in GitHub Actions, GitLab or Jenkins, Kubernetes and Helm experience, observability tools such as Splunk or Datadog, and policy as code with OPA, Sentinel or Cedar. Direct people management and working knowledge of EDR, MDM, identity, SIEM and vulnerability platforms are required. Based in New York.