Insider Threat Detection Engineer - 24/7 Security Defender

CyberJob; Washington (District of Columbia); Hybrid; USD 145,000 - 200,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

Basic life, AD&D and disability保险

Commuter benefits

Relocation assistance

Paid time off

2 weeks paid time off at year-end

10 paid holidays

Leave of absence program

Paid leave for new parents

401k plan

Job summary

Palantir Technologies seeks an Insider Threat Detection Engineer to protect data, people, and assets worldwide. You will build automated detection and investigation workflows, develop alerting strategies, and dissect artifacts across diverse systems to identify insider risks.

You will collaborate with the Information Security team to strengthen defenses, influence controls, and address evolving adversary tactics. Hybrid work options are available; some roles may require onsite presence.

Qualifications

• 3+ years of security experience in at least one major platform (e.g., AWS, Azure, Windows, OS X, Linux).
• Proficiency in Python (preferred), PowerShell, or similar.
• Familiarity with endpoint telemetry and log sources from at least one major OS.
• Experience with common SIEM/SOAR platforms and proficiency writing queries against security event data.

Responsibilities

• Engineer and automate end-to-end detection and investigation workflows, continuously improving Detection and Response infrastructure.
• Develop alerting and detection strategies to identify malicious or anomalous behavior, including new defensive techniques that adapt to evolving adversary tactics and tradecraft.
• Dissect network, host, memory, and other artifacts from multiple operating systems and applications.
• Investigate security events and active attacks across the enterprise, uncovering threats and identifying insider-risk patterns.

Skills

Python

PowerShell

Endpoint telemetry

SIEM/SOAR platforms

Security clearance

Tools

SIEM/SOAR platforms

Job description

Palantir Technologies seeks an Insider Threat Detection Engineer to protect data, people, and assets worldwide. You will build automated detection and investigation workflows, develop alerting strategies, and dissect artifacts across diverse systems to identify insider risks.

You will collaborate with the Information Security team to strengthen defenses, influence controls, and address evolving adversary tactics. Hybrid work options are available; some roles may require onsite presence.