Information Security Engineer - Infrastructure Security

The role

You will help protect Palantir's global endpoints, servers, identity systems, applications, networks and data flows. You will reduce attack surface, improve defensive controls, investigate security events and turn findings into lasting architectural and operational fixes.

What you will do

• Design, implement and improve security controls across endpoints, servers, identity systems, cloud services, SaaS applications, networks and data flows.
• Drive security posture improvements through hardening standards, configuration management, vulnerability remediation, access controls, monitoring and validation.
• Assess security risks in new platforms, products, architectures, vendors and services, and turn findings into recommendations and engineering work.
• Build and maintain automation for security operations, including configuration validation, drift monitoring, patching, access reviews, policy enforcement and alert triage.
• Partner with Identity, Infrastructure, Engineering, Legal and other Information Security teams to strengthen security architecture and address recurring risks.
• Turn insights from assessments, red team exercises, incident investigations and operational reviews into durable fixes.
• Build expertise in one or more security domains while contributing across the infrastructure security lifecycle.

Required qualifications

• 5+ years of hands-on experience in information security, infrastructure security, security engineering, security operations or a closely related field.
• Demonstrated experience securing at least one major infrastructure or security domain, with the ability and interest to work across multiple domains.
• Active TS/SCI security clearance, or eligibility and willingness to obtain one.
• A strong sense of ownership, sound judgment and integrity.
• Experience securing one or more major infrastructure domains such as Windows, macOS, Linux, Active Directory, cloud platforms, SaaS, networking, identity systems or enterprise endpoints.
• A broad infrastructure security mindset and curiosity about systems beyond your primary area.
• Familiarity with common infrastructure attack paths, adversary tactics, techniques and procedures, and the controls used to prevent, detect and contain them.
• The ability to assess complex environments and recognize how weaknesses across identity, endpoints, applications, networks, cloud or data flows can combine to create risk.
• Experience evaluating security tools and validating that controls are deployed effectively and keep working as intended.
• Familiarity with infrastructure-as-code, configuration management, CI/CD or other approaches to making security controls repeatable and scalable.

Nice to have

• Experience in complex, high-assurance, regulated or rapidly changing environments.
• Comfort moving between strategic problem-solving and hands-on technical work.
• Strong written and verbal communication skills, including explaining technical risks to partner teams.
• Contributions to security programs, tooling, automation, incident investigations or technical research, public or internal.

Benefits

• Medical, dental and vision insurance for employees and eligible dependents, plus voluntary life insurance
• Automatic basic life, AD&D and disability insurance
• Commuter benefits
• Flexible paid time off, not accrual based
• 2 weeks paid time off built into the end of each year, subject to team and business needs
• 10 paid holidays per year
• Supportive leave of absence program, including military service and medical events
• Paid leave for new parents and subsidized back-up care for all parents
• Fertility and family building benefits, including adoption, surrogacy and preservation
• Stipend for expenses that come with a new child
• 401k plan

Before you apply

• An active TS/SCI security clearance is required, or you must be eligible and willing to obtain one.

About the company

Palantir builds software for data-driven decisions and operations, helping partners develop lifesaving drugs, forecast supply chain disruptions and locate missing children. It is an Equal Opportunity Employer.