Information Security Engineer - Insider Risk

📋 Description

• Engineer and automate end-to-end detection and investigation workflows.
• Develop alerting and detection strategies for malicious or anomalous behavior.
• Dissect network, host, memory, and artifacts across OSes.
• Investigate security events and active attacks across the enterprise for insider risk.
• Influence security controls to safeguard Palantir's assets.
• Partner with the Information Security team to improve defense posture.

🎯 Requirements

• 3+ years security across a major platform (AWS/Azure/Windows/Linux).
• Proficiency in Python (preferred) or PowerShell.
• Familiarity with endpoint telemetry & logs on at least one OS.
• Experience with SIEM/SOAR platforms and writing security queries.
• Active TS/SCI clearance or eligibility.

🎁 Benefits

• Medical, dental, and vision insurance; voluntary life insurance.
• Basic life, AD&D and disability insurance.
• Commuter benefits and relocation assistance.
• Flexible PTO and year-end PTO.
• 10 paid holidays; leave of absence program.
• Fertility and family-building benefits; 401k enrollment.