A World-Changing Company
Palantir builds the world’s leading software for data-driven decisions and operations. By bringing the right data to the people who need it, our platforms empower our partners to develop lifesaving drugs, forecast supply chain disruptions, locate missing children, and more.
The Role
We're looking for an Information Security Engineer who can think broadly about how infrastructure is built, attacked, defended, and improved. You may have deep experience in one area—such as endpoint security, Active Directory, Data Loss Prevention, cloud security, identity, or detection and response—but you’re motivated by solving security problems across the environment.
As an Information Security Engineer focused on infrastructure security, you'll help protect Palantir's global endpoints, servers, identity systems, applications, networks, and data flows. You'll work across teams to reduce attack surface, improve defensive controls, investigate security events, and turn security findings into durable architectural and operational improvements.
This is not just a corporate security role; the adversaries we face are sophisticated. We need someone who understands both the details and the broader system: how a weakness in one part of the environment can create risk somewhere else, how controls interact, and how to build security improvements that hold up in practice.
Core Responsibilities
Design, implement, and improve defensive security controls across endpoints, servers, identity systems, cloud services, SaaS applications, networks, and data flowsOwn or contribute to security posture improvements, including hardening standards, configuration management, vulnerability remediation, access controls, monitoring, and ongoing validationEvaluate security risks in new platforms, products, architectures, vendors, and services, and translate findings into practical recommendations and engineering workBuild and maintain automation for security operations, such as configuration validation, drift monitoring, patching, access reviews, policy enforcement, alert triage, and security hygienePartner closely with Identity, Infrastructure, Engineering, Legal, and other Information Security teams to improve security architecture and reduce recurring riskTranslate findings from assessments, red team exercises, incident investigations, and operational reviews into durable fixes—including configuration changes, architectural improvements, policy updates, and automationDevelop expertise in one or more security domains while remaining effective across the broader infrastructure security lifecycleWhat We're Looking For
Experience securing one or more major infrastructure domains, such as Windows, macOS, Linux, Active Directory, cloud platforms, SaaS applications, networking, identity systems, or enterprise endpointsA broad infrastructure security mindset and curiosity about systems outside your primary area of expertiseUnderstanding of common infrastructure attack paths, adversary tactics, techniques, and procedures, and the security controls used to prevent, detect, and contain themAbility to assess complex environments and identify how weaknesses in identity, endpoints, applications, networks, cloud services, or data flows can combine to create security riskExperience evaluating security tooling and validating that controls are deployed effectively and continue to work as intendedFamiliarity with infrastructure-as-code, configuration management, CI/CD, or other approaches to making security controls repeatable and scalableWhat We Value
Ability to independently own projects, make progress through ambiguity, and balance competing priorities while collaborating effectively with colleaguesExperience working in complex, high-assurance, regulated, or rapidly changing environmentsThe ability to move between strategic problem-solving and hands-on technical workStrong written and verbal communication skills, including the ability to explain technical security risks and drive remediation with partner teamsContributions to security programs, tooling, automation, incident investigations, or technical research—whether public or internalWhat We Require
5+ years of hands-on experience in information security, infrastructure security, security engineering, security operations, or a closely related fieldDemonstrated experience securing at least one major infrastructure or security domain, with the ability and interest to work across multiple domainsActive TS/SCI security clearance, or eligibility and willingness to obtain oneA strong sense of ownership, sound judgment, and integrity
