Information Security Engineer - Insider Risk

Works on Palantir's detection and response team in New York with a focus on insider risk, protecting the company's people, data and most sensitive assets from threats inside and outside the organisation. The engineer automates detection and investigation workflows end to end, writes alerting for malicious or anomalous behaviour, analyses network, host and memory artifacts, and investigates live security events while looking for behavioural patterns that point to insider threats. The role also helps shape the controls around Palantir's most critical assets.

Palantir requires three or more years of security experience on a major platform, Python or PowerShell, familiarity with endpoint telemetry and logs, SIEM/SOAR query skills, and an active TS/SCI clearance or eligibility for one. Hybrid.