Join to apply for the Lead Application Security Engineer role at Point72
1 year ago Be among the first 25 applicants
Join to apply for the Lead Application Security Engineer role at Point72
Get AI-powered advice on this job and more exclusive features.
A Career with Point72’s Technology Group
As Point72 reimagines the future of investing, our Technology group is constantly improving our company’s IT infrastructure, positioning us at the forefront of a rapidly evolving technology landscape. We’re a team of experts experimenting, discovering new ways to harness the power of open-source solutions, and embracing enterprise agile methodology. We encourage professional development to ensure you bring innovative ideas to our products while satisfying your own intellectual curiosity.
Our Global Information Security team’s mission is to ensure the development, implementation, and management of a comprehensive program that effectively protects the confidentiality, integrity, and availability of Point72 information assets. Our team is comprised of security professionals with expertise in a diverse portfolio of security disciplines.
What you’ll do
- Collaborate with the DevOps team to design, implement, and manage a robust DevSecOps framework for our software development pipeline, integrating security tools and processes into our CI/CD workflows to enhance the developer experience
- Champion a security-first mindset within the development team, promoting secure coding practices and providing guidance on secure development methodologies
- Create security focused DevSecOps policies and standards and provide training and awareness to the development team
- Develop Key Risk Indicators (KRIs) to track security posture across business lines, measure progress and identify outliers
- Implement and manage security testing tools and processes within the CI/CD pipeline, including static application security testing (SAST), dynamic application security testing (DAST), software composition analysis (SCA), and open source security (OSS)
- Work together with the DevOps team to automate security controls and compliance checks within the development pipeline, ensuring adherence to industry best practices and regulatory requirements
- Troubleshoot and resolve security issues throughout the software development lifecycle
- Stay abreast of emerging security threats, vulnerabilities, and DevSecOps best practices to continuously improve our security posture
- 7-10 years of experience in software development, DevOps, or security engineering, with a strong focus on DevSecOps practices
- Expertise in CI/CD tools such as GitHub, Jenkins, GitLab CI/CD, Azure DevOps, or similar
- Proficiency in infrastructure-as-code tools like Terraform or CloudFormation
- Strong scripting and automation skills using Python, Bash, or similar languages
- Experience with security testing tools such as SonarQube, SNYK, Nessus, Qualys, or similar
- Familiarity with containerization technologies like Docker and Kubernetes
- Knowledge of security best practices for cloud environments (AWS, Azure, GCP)
- Understanding of security frameworks and compliance standards such as NIST CSF, ISO 27001, SOC 2
- Excellent communication and collaboration skills, with the ability to work effectively in a fast-paced, agile environment
- Strong problem-solving skills and a passion for continuous improvement in security practices
- Commitment to the highest ethical standards
We invest in our people, their careers, their health, and their well-being. When you work here, we provide:
- Fully-paid health care benefits
- Generous parental and family leave policies
- Mental and physical wellness programs
- Volunteer opportunities
- Non-profit matching gift program
- Support for employee-led affinity groups representing women, minorities and the LGBT+ community
- Tuition assistance
- A 401(k) savings program with an employer match and more
Point72 Asset Management is a global firm led by Steven Cohen that invests in multiple asset classes and strategies worldwide. Resting on more than a quarter-century of investing experience, we seek to be the industry’s premier asset manager through delivering superior risk-adjusted returns, adhering to the highest ethical standards, and offering the greatest opportunities to the industry’s brightest talent. For more information, visit annual base salary range for this role is $220,000-$260,000 (USD) , which does not include discretionary bonus compensation or our comprehensive benefits package. Actual compensation offered to the successful candidate may vary from posted hiring range based upon geographic location, work experience, education, and/or skill level, among other things.
Seniority level
Seniority level
Mid-Senior level
Employment type
Employment type
Full-time
Job function
Job function
Information Technology
Referrals increase your chances of interviewing at Point72 by 2x
Get notified about new Application Security Engineer jobs in New York, United States .
Application Security Engineer (prior Java or C#)
New York, NY $120,000.00-$150,000.00 1 month ago
New York, NY $160,000.00-$188,000.00 2 days ago
Application Security (AppSec) and DevSecOps Engineer
New York, NY $165,000.00-$330,000.00 2 weeks ago
New York, NY $135,000.00-$200,000.00 2 weeks ago
New York, United States $130,000.00-$190,000.00 21 hours ago
Security Engineer, Enterprise Engineering
New York, NY $147,000.00-$208,000.00 1 week ago
New York, United States $190,000.00-$240,000.00 16 hours ago
New York, NY $215,029.00-$290,289.00 3 weeks ago
White Plains, NY $97,000.00-$154,000.00 2 weeks ago
Sr. Application Security Engineer/Architect
New York, NY $200,000.00-$221,000.00 1 week ago
Senior Discovery IT System Administrator (Top Secret Clearance Required)
Albany, NY $160,579.80-$231,948.60 1 day ago
Security Engineer II, Stores Application Security
New York, NY $190,000.00-$240,000.00 6 days ago
Melville, NY $180,000.00-$185,000.00 1 month ago
Senior Software Engineer, Infrastructure
Senior Discovery IT System Administrator (Top Secret Clearance Required)
New York, NY $160,579.80-$231,948.60 1 day ago
Senior Application & Cloud Security Engineer
New York, NY $200,000.00-$200,000.00 1 week ago
Application Security Engineer, AWS AppSec EC2
Security Engineer, AppSec Testing Automation and Insights
New York, NY $125,500.00-$212,800.00 2 weeks ago
AWS Sr Application Security Engineer, AppSec -EC2
New York, United States $143,300.00-$247,600.00 1 week ago
CyberSecurity Solutions Engineer, USPS SLED - NYC
New York, NY $202,200.00-$256,800.00 2 days ago
Senior Product Security Engineer - Applications
Bethpage, NY $100,246.00-$164,689.00 4 weeks ago
We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.
#J-18808-Ljbffr