Point72 Security Automation Lead at Point72 leads design and operation of security automation pipelines and builds infrastructure-as-code solutions. The role focuses on automating security controls and improving incident detection and response.
Responsibilities
Lead the design and operation of a single, auditable security automation pipeline where security controls are authored, reviewed, validated, and deployed
Build drift reconciliation and validation engines that detect and remediate divergence across endpoint, identity, cloud, and vulnerability management domains
Replace manual console operations with version-controlled, auditable automation built on infrastructure-as-code and configuration management platforms
Implement and scale infrastructure-as-code deployment patterns and reusable automation components that accelerate delivery of security controls across teams
Build and maintain continuous integration and continuous deployment pipelines with automated linting, policy-as-code checks, pre-deployment validation gates, and promotion workflows
Design observability and monitoring pipelines that surface drift, control failures, and deployment health across environments and enable rapid incident detection and response
Instrument container and Kubernetes security workflows, including image scanning, admission control, runtime policy enforcement, and namespace isolation, to harden cloud-native workloads
Run the team's sprint cycle with a single backlog, two-week cadence, clear Definition of Done, controlled intake of unplanned work, and disciplined capacity planning
Integrate automation with existing security and infrastructure tooling while driving the transition from contractor-delivered manual work to engineering-owned automation
Define, track, and report operational metrics such as toil reduction, bypass rate, change failure rate, drift detection and remediation time, and sprint predictability, using those metrics to drive continuous improvement and postmortems
Demonstrated experience building and operating security automation pipelines in production environments, including continuous integration and continuous deployment systems, infrastructure-as-code, configuration management, and scripting in PowerShell, Python, or Bash
Hands-on experience using Terraform, CloudFormation, or Pulumi for infrastructure provisioning and policy enforcement at scale
Qualification
Required
Demonstrated experience building and operating security automation pipelines in production environments
Experience with continuous integration and continuous deployment systems
