Offensive Security Engineer
Palantir· Information Security
Hybrid (New York, NY)$145k - $200kFull-timePosted 2mo ago
About the role
Palantir's Offensive Security team tests Palantir products, infrastructure, and cloud environment like a real attacker, develops agentic offensive security tooling, and coordinates third-party penetration testing engagements.
Responsibilities
- Conduct hybrid web application penetration tests that combine source code review with runtime exploitation across our products and internal tooling.
- Perform external network penetration tests against internet-facing infrastructure, identifying exposed services, misconfigurations, and paths to obtain an initial foothold.
- Perform internal network and Active Directory security assessments, identifying privilege escalation paths, lateral movement opportunities, and misconfigurations.
- Assess the security of cloud and containerized infrastructure, including identity, network, and workload configurations.
- Collaborate with detection engineering to validate telemetry and detection coverage against real-world attack techniques uncovered during engagements.
- Scope and manage third-party pentest engagements end-to-end, critically review results, and work cross-functionally to convert findings into prioritized, actionable remediation.
- Partner with engineering to reproduce, prioritize, and verify fixes for the issues that are surfaced.
- Design and build offensive security tooling and automation tailored to Palantir's stack.
- Author clear, actionable write-ups and readouts for technical and non-technical stakeholders, translating findings into business risk and prioritized action.
Qualifications
- 4+ years of professional experience in offensive security, penetration testing, red teaming, or a closely related field.
- Willingness and eligibility to obtain a U.S. security clearance preferred.
- Proficiency in at least one scripting or programming language (e.g. Python, Go) sufficient to build and adapt your own testing tooling.
- Demonstrated experience assessing the security of cloud (AWS, Azure, or GCP) and containerized (Docker, Kubernetes) environments.
- Excellent organizational instincts, with the ability to keep multiple streams of work moving in parallel and to track each through to verified completion.
- Clear written and verbal communication, including the ability to explain a vulnerability, its impact, and its fix to the engineers who need to act on it.
Skills
Required:Web application penetration testingExternal and internal network penetration testingoffensive security toolingProgramming/scriptingCloud and container security
Benefits
- Medical, dental, and vision insurance for employees and eligible dependents
- Basic life, AD&D and disability insurance for employees
- Commuter benefits
- Relocation assistance
- Paid time off (take what you need, not accrual based)
- 2 weeks paid time off at year end (subject to team and business needs)
- 10 paid holidays
- Leave of absence program (military, medical)
- Paid parental leave and subsidized back-up care
- Fertility and family-building benefits (adoption, surrogacy, preservation)
- Child-related expenses stipend
- Enrollment in Palantir’s 401k plan
Last updated Oct 21, 2026. Interested? Apply on the company site.
More open roles at Palantir
- Physical Security Manager4d agoPalo Alto, CA · Global Security and Investigations
- Compliance Analyst4d agoHybrid (Washington, D.C.) · Information Security
- Compliance Analyst4d agoHybrid (New York, NY) · Information Security
- Software Engineer, Internship - Query Engines4d agoNew York, NY · Dev
- Software Engineer, Internship - Query Engines4d agoLondon · Dev