About the role
A World-Changing Company
Palantir builds the world’s leading software for data-driven decisions and operations. By bringing the right data to the people who need it, our platforms empower our partners to develop lifesaving drugs, forecast supply chain disruptions, locate missing children, and more.
The Role
We're looking for an Information Security Engineer who can think broadly about how infrastructure is built, attacked, defended, and improved. You may have deep experience in one area—such as endpoint security, Active Directory, Data Loss Prevention, cloud security, identity, or detection and response—but you’re motivated by solving security problems across the environment.
As an Information Security Engineer focused on infrastructure security, you'll help protect Palantir's global endpoints, servers, identity systems, applications, networks, and data flows. You'll work across teams to reduce attack surface, improve defensive controls, investigate security events, and turn security findings into durable architectural and operational improvements.
This is not just a corporate security role; the adversaries we face are sophisticated. We need someone who understands both the details and the broader system: how a weakness in one part of the environment can create risk somewhere else, how controls interact, and how to build security improvements that hold up in practice.
Core Responsibilities
- Design, implement, and improve security controls across endpoints, servers, identity systems, cloud services, SaaS applications, networks, and data flows.
- Drive security posture improvements through hardening standards, configuration management, vulnerability remediation, access controls, monitoring, and ongoing validation.
- Assess security risks in new platforms, products, architectures, vendors, and services, and turn findings into practical recommendations and engineering work.
- Build and maintain automation for security operations, including configuration validation, drift monitoring, patching, access reviews, policy enforcement, alert triage, and security hygiene.
- Partner with Identity, Infrastructure, Engineering, Legal, and other Information Security teams to strengthen security architecture and address recurring risks.
- Turn insights from assessments, red team exercises, incident investigations, and operational reviews into durable fixes, such as configuration changes, architectural improvements, policy updates, and automation.
- Build expertise in one or more security domains while contributing across the broader infrastructure security lifecycle.