A WORLD-CHANGING COMPANY

Palantir builds the world’s leading software for data-driven decisions and operations. By bringing the right data to the people who need it, our platforms empower our partners to develop lifesaving drugs, forecast supply chain disruptions, locate missing children, and more.

THE ROLE

Our products support some of the most important and impactful work in the world, including defence, intelligence, and commercial applications. We are trusted by our customers to protect their mission-critical information in the face of advanced persistent threats. Our offensive security engineers emulate these real-world threats and provide critical signal on attack vectors to help improve our security posture. This role will be hands-on and requires a deep understanding of micro-service architecture, multi-tenancy vulnerabilities, cloud security, and web application security.

In this role you’ll dive deep into the security of our products and more:

• Conduct security assessments. You’ll learn how our products work at the most technical level and then try to break them. This includes everything in our current and future product and service portfolio from Apollo to Foundry. You’ll document security findings and work with AppSec and product engineers to develop mitigations.
• Build offensive testing tooling and automation. Scale offensive security testing by developing tooling and automation. Repeatable security testing is ensures that mitigations and controls remain consistent and effective in the face of high velocity development.
• Define security metrics. Data is at the heart of Palantir and its important for our security engineers to use data to drive their decisions. As an offensive security engineer you’ll define, report, and use risk metrics to conduct security assessments.
• Collaborate with other Palantir security teams. You’ll work with our incident response team to improve detection and response capabilities across our products and infrastructure. There will also be opportunities to work with our Protect team to identify vulnerabilities in our product infrastructure and help define relevant security controls.
• Help defend a unique threat environment. Palantir offers an unparalleled opportunity to ply your craft on the bleeding edge of technology, software, and AI. With a wide range of customers and global impact our software is under constant threat from advanced persistent threats (APT). You get to think like an attacker and provide outside-the-box thinking on how to misuse our products.

CORE RESPONSIBILITIES

• 
  
  
  
• Perform offensive security assessments on highly complex products to identify vulnerabilities

• Perform offensive security assessments within our software supply chain
• Collaborate with engineering teams on security controls, threat modeling, and security-critical code and architecture.
• Develop and implement offensive tooling and automation to scale your capabilities and knowledge
• Operate as an offensive security expert for our products to inform risk assessments during product design
• Enable other security teams to focus on defending and improving critical areas of our product