Information Security Engineer - Insider Risk

The role

You will detect and investigate security events and insider threats across Palantir's global environment. You will build detection and response workflows and advise teams on security outcomes.

What you will do

• Engineer and automate end-to-end detection and investigation workflows
• Develop alerting and detection strategies for malicious or anomalous behavior
• Analyze network, host, memory and other artifacts from multiple operating systems and applications
• Investigate security events and active attacks across the enterprise
• Identify patterns of behavior that indicate insider risk
• Influence security controls that protect critical assets
• Partner with Information Security team to change network defense posture

Required qualifications

• 3+ years of security experience in at least one major platform (AWS, Azure, Windows, OS X, Linux or similar)
• Proficiency in Python, PowerShell or similar
• Familiarity with endpoint telemetry and log sources from at least one major operating system
• Experience with common SIEM/SOAR platforms and writing queries against security event data
• Active TS/SCI security clearance or eligibility to obtain one

Nice to have

• Broad exposure to multiple security subject areas, including forensics or threat intelligence
• Deep exposure in Incident Response or Detection Engineering
• Contributions to the security community such as conference talks, blog posts or public tools
• Comfort operating autonomously and advising across business levels

Benefits

• Medical, dental and vision insurance, plus voluntary life insurance
• Basic life, AD&D and disability insurance covered automatically
• Commuter benefits
• Relocation assistance
• Flexible paid time off, not accrual based
• 2 weeks paid time off at year end (subject to team and business needs)
• 10 paid holidays per year
• Leave of absence program including military service and medical events
• Paid leave for new parents and subsidized back-up care
• Fertility and family building benefits
• Stipend for expenses with a new child
• 401k plan

Before you apply

• Requires an active TS/SCI clearance or eligibility to obtain one

About the company

Palantir builds software for data-driven decisions and operations, used by partners for purposes such as developing drugs, forecasting supply chain disruptions and locating missing children.