Information Security Engineer - Infrastructure Security

Palantir
London, United Kingdom
Hybrid

Who this role is best for

Aimed at mid-to-senior level infrastructure security professionals who can work across domains and build automation.

Best fit for

  • Candidates with 5+ years of infrastructure security experience and a broad technical mindset
    — “5+ years of hands-on experience in information security”
  • Individuals who can bridge strategic thinking with hands-on technical execution
    — “Comfort moving between strategic problem-solving and hands-on technical work”
  • Professionals with automation and configuration management expertise in security operations
    — “Familiarity with infrastructure-as-code, configuration management”

Things to consider

  • In-person work is strongly encouraged in London, with limited remote flexibility
    — “you must work from the city and or country in which you are employed”
  • The role involves working with high-assurance and regulated environments
    — “Experience in complex, high-assurance, regulated, or rapidly changing environments”

How to stand out

  • Highlight cross-domain security improvements and automation you've built in past roles
    — “turn security findings into durable architectural and operational improvements”
  • Emphasize your ability to evaluate security tools and validate control effectiveness
    — “Experience evaluating security tools and validating that controls are deployed effectively”
  • Showcase your experience in reducing attack surfaces and improving defensive controls
    — “reduce attack surface, improve defensive controls”
  • Demonstrate how you've worked with identity, infrastructure, and legal teams to strengthen security
    — “Partner with Identity, Infrastructure, Engineering, Legal, and other Information Security teams”
Pace · SteadyCollaboration · HighAutonomy · MediumDecision Impact · Company

Derived from job-description analysis by Serendipath's career intelligence engine.

What success looks like

  • reduced attack surface
  • improved security posture
  • successful security investigations
Typical background
information securityinfrastructure security

Skills & requirements

Required

Infrastructure SecuritySecurity ControlsVulnerability AssessmentSecurity AutomationCloud Security

Preferred

Red Team ExercisesSecurity Architecture

Stack & domain

Endpoint SecurityActive DirectoryData Loss PreventionCloud SecurityIdentityDetection And Response

About the role

Original posting from Palantir via Lever

A World-Changing Company

Palantir builds the world’s leading software for data-driven decisions and operations. By bringing the right data to the people who need it, our platforms empower our partners to develop lifesaving drugs, forecast supply chain disruptions, locate missing children, and more.

The Role

We're looking for an Information Security Engineer who can think broadly about how infrastructure is built, attacked, defended, and improved. You may have deep experience in one area—such as endpoint security, Active Directory, Data Loss Prevention, cloud security, identity, or detection and response—but you’re motivated by solving security problems across the environment.

As an Information Security Engineer focused on infrastructure security, you'll help protect Palantir's global endpoints, servers, identity systems, applications, networks, and data flows. You'll work across teams to reduce attack surface, improve defensive controls, investigate security events, and turn security findings into durable architectural and operational improvements.

This is not just a corporate security role; the adversaries we face are sophisticated. We need someone who understands both the details and the broader system: how a weakness in one part of the environment can create risk somewhere else, how controls interact, and how to build security improvements that hold up in practice.

Core Responsibilities:

  • Design, implement, and improve security controls across endpoints, servers, identity systems, cloud services, SaaS applications, networks, and data flows.
  • Drive security posture improvements through hardening standards, configuration management, vulnerability remediation, access controls, monitoring, and ongoing validation.
  • Assess security risks in new platforms, products, architectures, vendors, and services, and turn findings into practical recommendations and engineering work.
  • Build and maintain automation for security operations, including configuration validation, drift monitoring, patching, access reviews, policy enforcement, alert triage, and security hygiene.
  • Partner with Identity, Infrastructure, Engineering, Legal, and other Information Security teams to strengthen security architecture and address recurring risks.
  • Turn insights from assessments, red team exercises, incident investigations, and operational reviews into durable fixes, such as configuration changes, architectural improvements, policy updates, and automation.
  • Build expertise in one or more security domains while contributing across the broader infrastructure security lifecycle.

What We're Looking For:

  • Experience securing one or more major infrastructure domains, such as Windows, macOS, Linux, Active Directory, cloud platforms, SaaS applications, networking, identity systems, or enterprise endpoints.
  • A broad infrastructure security mindset and curiosity about systems beyond your primary area of expertise.
  • Familiarity with common infrastructure attack paths, adversary tactics, techniques, and procedures, and the controls used to prevent, detect, and contain them.
  • The ability to assess complex environments and recognize how weaknesses across identity, endpoints, applications, networks, cloud services, or data flows can combine to create risk.
  • Experience evaluating security tools and validating that controls are deployed effectively and continue to work as intended.
  • Familiarity with infrastructure-as-code, configuration management, CI/CD, or other approaches to making security controls repeatable and scalable.

What We Value:

  • The ability to own projects, make progress through ambiguity, and balance competing priorities while working well with colleagues.
  • Experience in complex, high-assurance, regulated, or rapidly changing environments.
  • Comfort moving between strategic problem-solving and hands-on technical work.
  • Strong written and verbal communication skills, including the ability to explain technical risks and work with partner teams to drive remediation.
  • Contributions to security programs, tooling, automation, incident investigations, or technical research—whether public or internal.

What We Require:

  • 5+ years of hands-on experience in information security, infrastructure security, security engineering, security operations, or a closely related field.
  • Demonstrated experience securing at least one major infrastructure or security domain, with the ability and interest to work across multiple domains.
  • Active TS/SCI security clearance, or eligibility and willingness to obtain one.
  • A strong sense of ownership, sound judgment, and integrity.

Life at Palantir

We want every Palantirian to achieve their best outcomes, that’s why we celebrate individuals’ strengths, skills, and interests, from your first interview to your longterm growth, rather than rely on traditional career ladders. Paying attention to the needs of our community enables us to optimize our opportunities to grow and helps ensure many pathways to success at Palantir. Promoting health and well-being across all areas of Palantirians’ lives is just one of the ways we’re investing in our community. Learn more at Life at Palantir and note that our offerings may vary by region.

In keeping consistent with Palantir’s values and culture, we believe employees are “better together” and in-person work affords the opportunity for more creative outcomes. Therefore, we encourage employees to work from our offices to foster connectivity and innovation. Many teams do offer hybrid options (WFH a day or two a week), allowing our employees to strike the right trade-off for their personal productivity. Based on business need, there are a few roles that allow for “Remote” work on an exceptional basis. If you are applying for one of these roles, you must work from the city and or country in which you are employed. If the posting is specified as Onsite, you are required to work from an office.

If you want to empower the world's most important institutions, you belong here. Palantir values excellence regardless of background. We are committed to making the application and hiring process accessible to everyone and will provide a reasonable accommodation for those living with a disability. If you need an accommodation for the application or hiring process, please reach out and let us know how we can help.

Please note that you will never be asked to submit a payment or share financial information to participate in our interview process. If you suspect that you've been contacted by a scammer, we recommend you cease all communication with the individual and consider reporting them to the relevant authorities, such as the US FBI Internet Crime Complaint Center (IC3).

Source: Palantir careers (Lever)

Similar roles

More roles at Palantir