Implements and improves managed security services across endpoint, identity, email, network, secure access, and cloud environments, owning complex technical delivery, incident investigations, service improvements, and colleague mentoring.
Information Security Engineer - Infrastructure Security
📜 Description
- Design, implement, and improve security controls across endpoints, servers, identity systems, cloud services, SaaS applications, networks, and data flows.
- Improve security posture through hardening, configuration management, vulnerability remediation, access controls, monitoring, and validation.
- Assess risks in platforms, products, architectures, vendors, and services, and translate findings into practical engineering work.
- Automate security operations such as configuration validation, drift monitoring, patching, access reviews, policy enforcement, and alert triage.
- Partner across Identity, Infrastructure, Engineering, Legal, and Information Security to strengthen architecture and address recurring risks.
- Turn assessment, red-team, and incident findings into durable configuration, architecture, policy, and automation improvements.
🛠️ Requirements
- Experience securing one or more major infrastructure domains, such as Windows, macOS, Linux, Active Directory, cloud platforms, SaaS applications, networking, identity systems, or enterprise endpoints.
- A broad infrastructure security mindset and curiosity about systems beyond your primary area of expertise.
- Familiarity with common infrastructure attack paths, adversary tactics, techniques, and procedures, and the controls used to prevent, detect, and contain them.
- The ability to assess complex environments and recognize how weaknesses across identity, endpoints, applications, networks, cloud services, or data flows can combine to create risk.
- Experience evaluating security tools and validating that controls are deployed effectively and continue to work as intended.
- Familiarity with infrastructure-as-code, configuration management, CI/CD, or other approaches to making security controls repeatable and scalable.
- 5+ years of hands-on experience in information security, infrastructure security, security engineering, security operations, or a closely related field.
- Demonstrated experience securing at least one major infrastructure or security domain, with the ability and interest to work across multiple domains.
- Active TS/SCI security clearance, or eligibility and willingness to obtain one.
- A strong sense of ownership, sound judgment, and integrity.
✨ Benefits
- Employees (and their eligible dependents) can enroll in medical
- Dental
- Vision insurance as well as voluntary life insurance
- Employees are automatically covered by Palantir's basic life, AD&D and disability insurance
- Commuter benefits
- Take what you need paid time off, not accrual based
- 2 weeks paid time off built into the end of each year (subject to team and business needs)
- 10 paid holidays throughout the calendar year
- Supportive leave of absence program including time off for military service and medical events
- Paid leave for new parents and subsidized back-up care for all parents
Full job description
The Role
As an Information Security Engineer focused on infrastructure security, you'll help protect Palantir's global endpoints, servers, identity systems, applications, networks, and data flows. You'll work across teams to reduce attack surface, improve defensive controls, investigate security events, and turn security findings into durable architectural and operational improvements.
This is not just a corporate security role; the adversaries we face are sophisticated. We need someone who understands both the details and the broader system: how a weakness in one part of the environment can create risk somewhere else, how controls interact, and how to build security improvements that hold up in practice.
Core Responsibilities
What We're Looking For
What We Value
What We Require
Similar jobs
Search more Cybersecurity Engineer jobsArchitect and build platform security across hardware, data centers, networks, and control planes, protecting sensitive customer workloads through verifiable tenant isolation, secure infrastructure, and automated controls.
Build and strengthen security across detection, incident response, cloud and application security, data protection, AI workflows, and third-party risk for a growing fintech environment.
Build AI-powered security automation, secure applications and cloud infrastructure, and lead incident response while partnering with engineering to make security practical and scalable.
Own product security across Lambda’s AI cloud, from threat modeling and securing multi-tenant infrastructure to code reviews, vulnerability remediation, security tooling, and enterprise customer reviews.
