6 months ago
Base Salary
$145k - $200k/yr
Responsibilities
- Engineer and automate end-to-end detection and investigation workflows
- Continuously improve detection and response infrastructure
- Develop alerting and detection strategies for malicious or anomalous behavior
- Analyze network, host, memory, and other artifacts across operating systems and applications
- Investigate enterprise security events and active attacks to identify sophisticated threats and insider-risk patterns
- Inform and influence security controls protecting critical assets
- Collaborate with the Information Security team to improve the company’s network defense posture
Requirements
- At least 3 years of extensive security experience with one major platform such as AWS, Azure, Windows, OS X, or Linux
- Proficiency in Python, preferably, PowerShell, or a similar language
- Familiarity with endpoint telemetry and log sources from at least one major operating system
- Experience with common SIEM/SOAR platforms and writing queries against security event data
- Active TS/SCI security clearance or eligibility to obtain one
- Broad exposure to security disciplines, particularly forensics or threat intelligence
- Deep experience in incident response or detection engineering
- Ability to work autonomously and advise stakeholders across business levels
- Substantive contributions to the information security community, such as conference talks, blog posts, or public tool development
Benefits
- Medical, dental, vision, voluntary life, basic life, AD&D, and disability insurance
- Commuter benefits and relocation assistance
- Take-what-you-need paid time off, plus two weeks of paid time off at year end subject to team and business needs
- Ten paid holidays
- Supportive leave of absence program, including military and medical leave
- Paid parental leave and subsidized backup care
- Fertility and family-building benefits
- New-child expense stipend
- 401(k) plan
- Primarily in-person office work; many teams offer hybrid work one or two days per week, with limited exceptional remote roles
About Palantir
Palantir builds data-integration and AI-driven analytics platforms used by governments and large enterprises to run operations and make decisions. Its core products, including Gotham and Foundry (with Apollo for deployment), are sold via software subscriptions and implementation services. Founded in 2003 and headquartered in Miami, it is NYSE-listed and deployed across defense, intelligence, healthcare, and industrial sectors.