Information Security Engineer - Insider Risk

Joins Palantir's detection and response team in Washington, DC as an Information Security Engineer specialising in insider risk, guarding the company's people, data and most sensitive assets against both internal and external adversaries. Day to day the engineer builds and automates detection and investigation pipelines, develops alerting that adapts to changing tradecraft, examines host, network and memory evidence, and investigates active incidents for signs of insider activity, while advising on the controls that protect critical assets.

The team requires at least three years of security work on a platform such as AWS, Azure, Windows or Linux, Python or PowerShell, experience querying SIEM/SOAR event data and endpoint logs, and an active TS/SCI clearance or the eligibility to get one. Hybrid.