Network Security Engineer

As Point72 continues to reimagine the future of investing, our Technology group is constantly improving our company’s IT infrastructure, positioning us at the forefront of a rapidly evolving technology landscape. We’re a team of experts experimenting and discovering new ways to provide exceptional end user experience while embracing enterprise agile methodology. We encourage professional development to ensure you bring innovative ideas to our team while satisfying your own intellectual curiosity.

Our Technology Infrastructure team engineers and operates the foundational technology platforms that power all of the firm’s applications and businesses. Our disciplines span a broad array of technologies from datacenter infrastructure to large scale cloud services, with the shared goal of providing the most reliable, performant, modern technology platforms to improve time-to-market for our business. We also deliver end-user technology solutions to support the evolving collaboration and productivity needs of our global teams. Our team focuses on innovation and challenging the current state of our infrastructure technology in a fast-paced, dynamic, and collaborative working environment.

• Provide level 2/3 engineering support for various network security related solutions, including our network/micro segmentation (Illumio), firewalls (Palo Alto Networks), VPNs (GlobalProtect/Prisma Access), web application firewall (Cloudflare), network detection and response, network access control (Cisco ISE), web browser isolation, network security policy management, and other related network security platforms
• Manage advanced security configurations of Palo Alto firewalls locally and globally with the deployed Prisma Access SASE solution
• Configure and manage all deployed network security platforms such as firewalls and IDS/IPS, and ensuring they are up-to-date and configured according to industry standards
• Collaborate with other technology teams to ensure secure integration of cloud services such as AWS, Azure, and GCP, including implementation of security controls such as access controls, encryption, and network segmentation
• Develop and maintain network segmentation policies and practices, including implementing zero trust architecture and micro segmentation
• Conduct risk assessments to identify vulnerabilities, perform penetration testing and recommend remediation plans, including vulnerability management programs
• Develop training materials and conduct regular training sessions for users on network security best practices and policies
• Ensure network security compliance with regulatory standards such as PCI DSS, HIPAA, and GDPR by implementing policies and procedures and performing regular audits

• Minimum of 5-7 years of experience in network security within financial services or another highly regulated environment

• Demonstrated experience with networking, firewalling (Palo Alto Networks, including User-ID, App-ID, IDS/IPS) WAF, DDoS, NAC, and other related network security related tools and technologies
• Knowledge of network segmentation, including micro segmentation and zero trust architecture leveraging tools such as Illumio, Guardicore, VMware NSX (NSX-T), vArmour, Cisco ACI, ShieldX, Unisys Stealth, and/or Zero Networks
• Experience with Secure Access Service Edge (SASE) and Cloud Access Security Broker (CASB) architectures leveraging tools such as Prisma Access, zScaler, and/or NetSkope
• Knowledge of cloud networking with cloud providers such as AWS, Azure, and/or GCP
• Configuration and management in network detection and response (NDR) platforms such as Darktrace, ExtraHop, and/or Vectra
• Industry certifications such as CISSP, CCNA/CCNP Routing & Switching, Palo Alto Networks Security certifications (PCSNE), Security+, and/or CCNA Security.
• Excellent analytical and communication skills, with the ability to explain technical concepts to non-technical audiences
• Ability to collaborate with various engineering and application development teams to align security requirements, influence decision-making, build relationships, and communicate strategy effectively
• Commitment to the highest ethical standards

Point72 is a leading global alternative investment firm led by Steven A. Cohen. Building on more than 30 years of investing experience, Point72 seeks to deliver superior returns for its investors through fundamental and systematic investing strategies across asset classes and geographies. We aim to attract and retain the industry’s brightest talent by cultivating an investor-led culture and committing to our people’s long-term growth. For more information, visit https://point72.com/..