{"id":125967,"url":"https://alion.io/job/palantir-technologies-information-security-engineer-insider-risk-2","title":"Information Security Engineer - Insider Risk","company":{"id":24,"name":"Palantir Technologies","domain":"palantir.com","url":"https://alion.io/company/palantir","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Lever","truth_index":{"grade":"C","score":67,"open_postings":229,"ghost_share":0.459,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":167,"computed_at":"2026-10-30T05:48:23Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Washington, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":95000,"max_usd":181000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":502},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Linux","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-04-14T14:32:19Z","employer_posted_date":"2026-04-14","last_verified_at":"2026-10-30T20:57:29Z","board_verified":true,"closed_at":null,"days_open":199,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":197},"description":"The Role\nAs an Insider Threat Detection Engineer, you are responsible for protecting Palantir's people, data, and most sensitive assets across the globe. Your technical expertise is matched by your integrity and genuine passion for security. You work well on a team, are highly motivated, and thrive on solving problems and taking on new challenges.\nYour team serves as a critical line of defense, responsible for the 24/7 prevention, detection, and investigation of security events and active threats across Palantir's environment. This role focuses on all aspects of Detection and Response with a strong emphasis on identifying and mitigating insider risks. Your work will directly impact the success of Palantir's mission by making it difficult for adversaries - both external and internal - to compromise our global network.\nCore Responsibilities\nEngineer and automate end-to-end detection and investigation workflows, continuously improving Detection and Response infrastructure\nDevelop alerting and detection strategies to identify malicious or anomalous behavior, including new and novel defensive techniques that adapt to evolving adversary tactics and tradecraft\nDissect network, host, memory, and other artifacts originating from multiple operating systems and applications.\nInvestigate security events and active attacks across the enterprise, uncovering sophisticated threats and identifying patterns of behavior that indicate insider risk\nInfluence and inform security controls designed to safeguard Palantir's most critical assets\nPartner closely with other members of the Information Security team to lead changes in the company's network defense posture.\nWhat We Value\nBroad exposure to multiple security subject areas, including a strong background in forensics or threat intelligence\nDeep exposure in Incident Response or Detection Engineering\nDesire to further the information security community through substantive contributions (e.g. conference talks, blog posts, public tool development, etc.)\nComfort in operating autonomously and engaging across business levels to advise on security outcomes.\nWhat We Require\nExtensive security experience (3+ years) in at least one major platform (e.g. AWS, Azure, Windows, OS X, Linux, etc.)\nProficiency in Python (preferred), PowerShell, or similar\nFamiliarity with endpoint telemetry and log sources from at least one major operating system\nExperience with common SIEM/SOAR platforms and proficiency writing queries against security event data\nActive TS/SCI security clearance or eligibility to obtain a security clearance.","description_format":"text","description_chars":2585,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":true,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Data Integration & ETL Tools","Decision Intelligence","Defense AI"],"lifecycle":[{"event":"open","at":"2026-04-14T14:32:19Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 207 · green card filings: 38","filings_12m":207,"filings_prev_12m":125,"green_card_filings_12m":38,"median_offered_wage_usd":150949,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":34,"band":"fade","label":"Fading","p_open":1,"p_active":0.783,"p_room":0.44,"age_days":198,"expected_fill_days":167,"reasons":["conf:1","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-30T05:48:23Z"},"pay":null,"html_url":"https://alion.io/job/palantir-technologies-information-security-engineer-insider-risk-2","json_url":"https://alion.io/job/palantir-technologies-information-security-engineer-insider-risk-2.json","meta":{"generated_at":"2026-10-30T22:22:56Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":13130,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-31T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":24},"rest":"https://alion.io/mcp/rest/get_company?id=24"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fpalantir-technologies-information-security-engineer-insider-risk-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fpalantir-technologies-information-security-engineer-insider-risk-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fpalantir-technologies-information-security-engineer-insider-risk-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/palantir-technologies-information-security-engineer-insider-risk-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fpalantir-technologies-information-security-engineer-insider-risk-2"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":125967}},{"tool":"search_jobs","arguments":{"company":"palantir.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":125967},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}