Information Security Engineer - Infrastructure Security

The role

This engineer will help protect Palantir's global endpoints, servers, identity systems, applications, networks, and data flows. The work includes reducing attack surface, improving defensive controls, investigating security events, and building durable security improvements.

What you will do

• Design, implement, and improve security controls across endpoints, servers, identity systems, cloud services, SaaS applications, networks, and data flows.
• Drive security posture improvements through hardening standards, configuration management, vulnerability remediation, access controls, monitoring, and validation.
• Assess security risks in new platforms, products, architectures, vendors, and services, and turn findings into recommendations and engineering work.
• Build and maintain automation for security operations, including configuration validation, drift monitoring, patching, access reviews, and alert triage.
• Partner with Identity, Infrastructure, Engineering, Legal, and other Information Security teams to strengthen security architecture.
• Turn insights from assessments, red team exercises, and incident investigations into durable fixes.
• Build expertise in one or more security domains while contributing across the infrastructure security lifecycle.

Required qualifications

• 5+ years of hands-on experience in information security, infrastructure security, security engineering, security operations, or a closely related field.
• Demonstrated experience securing at least one major infrastructure or security domain, with the ability and interest to work across multiple domains.
• Active TS/SCI security clearance, or eligibility and willingness to obtain one.
• A strong sense of ownership, sound judgment, and integrity.
• Experience securing one or more major infrastructure domains, such as Windows, macOS, Linux, Active Directory, cloud platforms, SaaS applications, networking, identity systems, or enterprise endpoints
• A broad infrastructure security mindset and curiosity about systems beyond your primary area.
• Familiarity with common infrastructure attack paths, adversary tactics, techniques, and procedures, and the controls used to prevent, detect, and contain them.
• The ability to assess complex environments and recognize how weaknesses across identity, endpoints, applications, networks, cloud, or data flows can combine to create risk.
• Experience evaluating security tools and validating that controls are deployed effectively.
• Familiarity with infrastructure-as-code, configuration management, CI/CD, or other approaches to making security controls repeatable and scalable.

Nice to have

• Experience in complex, high-assurance, regulated, or rapidly changing environments.
• Strong written and verbal communication skills, including explaining technical risks to partner teams.
• Contributions to security programs, tooling, automation, incident investigations, or technical research, public or internal.

Benefits

• Opportunities to grow based on individual strengths, skills, and interests rather than traditional career ladders.
• Health and well-being support across all areas of life.
• Hybrid work options in many teams, with in-person work encouraged in offices.

Before you apply

• Requires an active TS/SCI security clearance, or eligibility and willingness to obtain one.

About the company

Palantir builds software for data-driven decisions and operations. Its platforms help partners develop drugs, forecast supply chain disruptions, and locate missing children.