Information Security Engineer - Infrastructure Security

In this role you protect Palantir’s global infrastructure by hardening endpoints, servers, identity systems, cloud services, and networks. You work across teams to reduce attack surface, implement durable security controls, and translate findings into architectural improvements. You’ll balance strategic planning with hands-on engineering to defend a complex environment against sophisticated adversaries. This is a chance to shape security across the lifecycle and contribute to a mission-driven, collaborative engineering culture.

• hybrid work options
• in-person collaboration
• focus on health and well-being

• Design, implement, and improve security controls across endpoints, servers, identity systems, cloud services, SaaS applications, networks, and data flows
• Drive security posture improvements through hardening standards, configuration management, vulnerability remediation, access controls, monitoring, and ongoing validation
• Assess security risks in new platforms, products, architectures, vendors, and services, turning findings into practical recommendations and engineering work
• Build and maintain automation for security operations, including configuration validation, drift monitoring, patching, access reviews, policy enforcement, alert triage, and security hygiene
• Partner with Identity, Infrastructure, Engineering, Legal, and other Information Security teams to strengthen security architecture and address recurring risks
• Turn insights from assessments, red team exercises, incident investigations, and operational reviews into durable fixes, such as configuration changes, architectural improvements, policy updates, and automation
• Build expertise in one or more security domains while contributing across the broader infrastructure security lifecycle

• 5+ years of hands-on experience in information security, infrastructure security, security engineering, security operations, or a closely related field
• Demonstrated experience securing at least one major infrastructure or security domain, with the ability and interest to work across multiple domains
• Active TS/SCI security clearance, or eligibility and willingness to obtain one
• A strong sense of ownership, sound judgment, and integrity

• Strong written and verbal communication
• Ability to own projects and navigate ambiguity
• Collaborative mindset with cross-functional teams
• Experience securing Windows, macOS, Linux, Active Directory, cloud platforms, SaaS applications, networking, identity systems, or enterprise endpoints
• Infrastructure-as-code, configuration management, CI/CD
• Threat modeling and understanding attacker tactics, techniques, and procedures