Design and build endpoint security platforms for a global device fleet, owning architecture, production code, automation, and secure device baselines while guiding engineers and advancing threat detection.
Information Security Engineer - Infrastructure Security
📜 Description
- Design and improve defensive controls across endpoints, servers, identity systems, cloud services, SaaS applications, networks, and data flows.
- Improve security posture through hardening, configuration management, vulnerability remediation, access controls, monitoring, and validation.
- Assess risks in platforms, products, architectures, vendors, and services, then translate findings into practical engineering work.
- Automate security operations, including configuration validation, drift monitoring, patching, access reviews, policy enforcement, and alert triage.
- Partner with Identity, Infrastructure, Engineering, Legal, and Information Security teams to improve architecture and reduce recurring risk.
- Turn assessment, red-team, incident, and operational findings into durable configuration, architecture, policy, and automation improvements.
🛠️ Requirements
- Experience securing one or more major infrastructure domains, such as Windows, macOS, Linux, Active Directory, cloud platforms, SaaS applications, networking, identity systems, or enterprise endpoints
- A broad infrastructure security mindset and curiosity about systems outside your primary area of expertise
- Understanding of common infrastructure attack paths, adversary tactics, techniques, and procedures, and the security controls used to prevent, detect, and contain them
- Ability to assess complex environments and identify how weaknesses in identity, endpoints, applications, networks, cloud services, or data flows can combine to create security risk
- Experience evaluating security tooling and validating that controls are deployed effectively and continue to work as intended
- Familiarity with infrastructure-as-code, configuration management, CI/CD, or other approaches to making security controls repeatable and scalable
- 5+ years of hands-on experience in information security, infrastructure security, security engineering, security operations, or a closely related field
- Demonstrated experience securing at least one major infrastructure or security domain, with the ability and interest to work across multiple domains
- Active TS/SCI security clearance, or eligibility and willingness to obtain one
- A strong sense of ownership, sound judgment, and integrity
✨ Benefits
- Employees (and their eligible dependents) can enroll in medical
- Dental
- Vision insurance as well as voluntary life insurance
- Employees are automatically covered by Palantir's basic life, AD&D and disability insurance
- Commuter benefits
- Take what you need paid time off, not accrual based
- 2 weeks paid time off built into the end of each year (subject to team and business needs)
- 10 paid holidays throughout the calendar year
- Supportive leave of absence program including time off for military service and medical events
- Paid leave for new parents and subsidized back-up care for all parents
Full job description
The Role
As an Information Security Engineer focused on infrastructure security, you'll help protect Palantir's global endpoints, servers, identity systems, applications, networks, and data flows. You'll work across teams to reduce attack surface, improve defensive controls, investigate security events, and turn security findings into durable architectural and operational improvements.
This is not just a corporate security role; the adversaries we face are sophisticated. We need someone who understands both the details and the broader system: how a weakness in one part of the environment can create risk somewhere else, how controls interact, and how to build security improvements that hold up in practice.
Core Responsibilities
What We're Looking For
What We Value
What We Require
Similar jobs
Search more Cybersecurity Engineer jobsOwn and strengthen security across a cloud-native platform by hardening infrastructure, threat-modeling systems, driving detection and incident response, and helping secure AI/ML systems and sensitive data.
Senior Security Engineer, Corporate Security
Build and maintain corporate security controls across endpoints, enterprise applications, and network communications, partnering with IT and engineering to reduce risk while protecting sensitive data without unnecessary user friction.
Own workforce identity and access management, serving as the primary expert for Okta, SaaS access, and automation while strengthening access governance, privileged access, and security operations.
Senior Security Engineer (Incident Response)
As a Senior Security Engineer focused on Incident Response, you will investigate security threats, coordinate incident responses, and enhance automation to protect Nubank's customers and systems.
