Defensive Security Analyst - SOC Threat Hunter

Palantir Technologies; Washington (District of Columbia); Hybrid; USD 145,000 - 200,000; Full time

Benefits offered by this job

Relocation assistance

Commuter benefits

Medical, dental & vision insurance

Basic life, AD&D & disability

Job summary

Palantir Technologies is seeking a Defensive Security Analyst to secure Palantir's people and infrastructure worldwide. You will manage SOC systems, engineer and monitor defenses, and develop incident response and forensic capabilities across diverse environments.

Ideal candidates bring SOC operation experience, scripting skills (PowerShell, Python, Bash), and a TS/SCI clearance. Applicants should be able to commute to the Georgetown office within an hour for on-call duties, with a hybrid work

Qualifications

• TS/SCI clearance is required.
• Experience operating in a SOC environment.
• Experience with scripting languages (PowerShell, Python, Bash).
• Willingness to commute to Georgetown office within one hour when on-call.

Responsibilities

• Build, run, and own infrastructure and automation to detect, contain, and eradicate security threats.
• Develop alerting and detection strategies for malicious or anomalous behavior.
• Prepare reports and presentations for technical and executive audiences.
• Develop defensive techniques to counter adversary ideas and tactics.
• Dissect artifacts from networks, hosts, and memory across OSes and apps.
• Support enterprise-wide hunt operations and threat discovery.
• Collaborate with Information Security to improve network defense posture.
• Provide incident response and digital forensics support including logs and memory captures.

Skills

SIEM knowledge

AWS cloud

Penetration testing

Python/Powershell/Bash

SOC operations

Tools

Forensic tools

IR tools

Job description

Palantir Technologies is seeking a Defensive Security Analyst to secure Palantir's people and infrastructure worldwide. You will manage SOC systems, engineer and monitor defenses, and develop incident response and forensic capabilities across diverse environments.

Ideal candidates bring SOC operation experience, scripting skills (PowerShell, Python, Bash), and a TS/SCI clearance. Applicants should be able to commute to the Georgetown office within an hour for on-call duties, with a hybrid work