Offensive Security Engineer

TieTalent; Palo Alto (CA); On-site; USD 135,000 - 200,000; Full time

Job summary

A leading technology company in Palo Alto, known for impactful data-driven software, is seeking a Security Engineer. This role involves performing security assessments, collaborating with engineering teams, and developing offensive security tools. Ideal candidates possess at least 5 years of relevant experience and a strong background in software security.

Benefits

Medical, dental, and vision insurance

401k plan

Take what you need PTO

Relocation assistance

Qualifications

• 5+ years of experience performing offensive security testing.
• Experience with cloud security, web application security, and micro-service architectures.
• Ability to write code for automation of offensive testing.

Responsibilities

• Conduct security assessments on complex products.
• Develop offensive testing tooling and automation.
• Collaborate with engineering teams on security controls.

Skills

Security Testing

Problem Solving

Collaboration

Offensive Security

Tools

Python

Java

Go

Job description

2 days ago Be among the first 25 applicants

Get AI-powered advice on this job and more exclusive features.

Sign in to access AI-powered advices

Continue with Google Continue with Google

Continue with Google Continue with Google

Continue with Google Continue with Google

Continue with Google Continue with Google

Continue with Google Continue with Google

Continue with Google Continue with Google

About

A World-Changing Company

Palantir builds the world’s leading software for data-driven decisions and operations. By bringing the right data to the people who need it, our platforms empower our partners to develop lifesaving drugs, forecast supply chain disruptions, locate missing children, and more.

The Role

Our products support some of the most important and impactful work in the world, including defense, intelligence, and commercial applications. We are trusted by our customers to protect their mission-critical information in the face of advanced persistent threats. Our offensive security engineers emulate these real-world threats and provide critical signal on attack vectors to help improve our security posture. This role will be hands-on and requires a deep understanding of micro-service architecture, multi-tenancy vulnerabilities, cloud security, and web application security.

In this role you’ll dive deep into the security of our products and more:

• Conduct security assessments. You’ll learn how our products work at the most technical level and then try to break them. This includes everything in our current and future product and service portfolio from Apollo to Foundry. You’ll document security findings and work with AppSec and product engineers to develop mitigations.
• Build offensive testing tooling and automation. Scale offensive security testing by developing tooling and automation. Repeatable security testing is ensures that mitigations and controls remain consistent and effective in the face of high velocity development.
• Define security metrics. Data is at the heart of Palantir and its important for our security engineers to use data to drive their decisions. As an offensive security engineer you’ll define, report, and use risk metrics to conduct security assessments.
• Collaborate with other Palantir security teams. You’ll work with our incident response team to improve detection and response capabilities across our products and infrastructure. There will also be opportunities to work with our Protect team to identify vulnerabilities in our product infrastructure and help define relevant security controls.
• Help defend a unique threat environment. Palantir offers an unparalleled opportunity to ply your craft on the bleeding edge of technology, software, and AI. With a wide range of customers and global impact our software is under constant threat from advanced persistent threats (APT). You get to think like an attacker and provide outside-the-box thinking on how to misuse our products.
  
  

Core Responsibilities

• Perform offensive security assessments on highly complex products to identify vulnerabilities
• Perform offensive security assessments within our software supply chain
• Collaborate with engineering teams on security controls, threat modeling, and security-critical code and architecture.
• Develop and implement offensive tooling and automation to scale your capabilities and knowledge
• Operate as an offensive security expert for our products to inform risk assessments during product design
• Enable other security teams to focus on defending and improving critical areas of our product
  
  

What We Value

• Self motivated, experience in solving complex problems
• Experience performing offensive security testing on software supply chains including CI/CD systems, source control, and dependency based attack vectors
• Participation in bug bounties, CTFs, vulnerability research, open source tool development, and security presentations
• Ability to learn and apply new technologies quickly and in complex deployments
• Experience testing AI related vulnerabilities and architectures.
• Willingness or eligibility to obtain a US security clearance
  
  

What We Require

• 5+ years of experience performing offensive security testing on web applications, cloud environments, and highly scaled architectures (e.g. SOA or micro-services)
• Experience testing and exploiting a variety of services and bug types including authentication and authorization, multi-tenancy, and cloud environment misconfigurations
• Ability to write code to automate aspects of offensive testing, familiarity with Python, Java, Go are preferred
• Ability to evaluate code for vulnerabilities and weaknesses
• Strong communication and collaboration skills, comfortableness working closely with engineering and defensive security teams
  
  

Salary

The estimated salary range for this position is estimated to be $135,000 - $200,000/year. Total compensation for this position may also include Restricted Stock units, sign-on bonus and other potential future incentives. Further note that total compensation for this position will be determined by each individual’s relevant qualifications, work experience, skills, and other factors. This estimate excludes the value of any potential sign-on bonus; the value of any benefits offered; and the potential future value of any long-term incentives.

Our benefits aim to promote health and wellbeing across all areas of Palantirians’ lives. We work to continuously improve our offerings and listen to our community as we design and update them. The list below details our available benefits and some of the perks that can be enjoyed as an employee of Palantir Technologies.

Benefits

• Employees (and their eligible dependents) can enroll in medical, dental, and vision insurance as well as voluntary life insurance
• Employees are automatically covered by Palantir’s basic life, AD&D and disability insurance
• Commuter benefits
• Relocation assistance
• Take what you need paid time off, not accrual based
• 2 weeks paid time off built into the end of each year (subject to team and business needs)
• 10 paid holidays throughout the calendar year
• Supportive leave of absence program including time off for military service and medical events
• Paid leave for new parents and subsidized back-up care for all parents
• Fertility and family building benefits including but not limited to adoption, surrogacy, and preservation
• Stipend to help with expenses that come with a new child
• Employees can enroll in Palantir’s 401k plan
  
  

Nice-to-have skills

• Cloud Security
• Web Application Security
• Threat Modeling
• Python
• Java
• Go
• Palo Alto, California
  
  

Work experience

• Cyber Security Specialist
• Pentester
• Security Analyst
  
  

Languages

• English

Seniority level

• Seniority level

  Mid-Senior level

Employment type

• Employment type

  Full-time

Job function

• Job function

  Information Technology

• Industries

  Technology, Information and Internet

Referrals increase your chances of interviewing at TieTalent by 2x

Get notified about new Security Engineer jobs in Palo Alto, CA.

Menlo Park, CA $177,000 - $251,000 2 weeks ago

Sunnyvale, CA $229,000 - $254,000 3 days ago

Information Security Apprentice Engineer

Sunnyvale, CA
$82,000.00
-
$109,000.00
2 days ago

Information Security Apprentice Engineer

Sunnyvale, CA
$82,000.00
-
$109,000.00
2 days ago

Menlo Park, CA
$213,000.00
-
$293,000.00
2 weeks ago

Santa Clara, CA
$135,000.00
-
$250,000.00
3 months ago

Menlo Park, CA
$147,000.00
-
$208,000.00
2 weeks ago

Senior Physical Security Systems Engineer, Infrastructure

Redwood City, CA
$158,000.00
-
$237,000.00
6 days ago

Staff Security Engineer (Detection Engineering)

Mountain View, CA
$177,000.00
-
$256,500.00
5 days ago

Menlo Park, CA
$177,000.00
-
$251,000.00
2 weeks ago

Security Engineer, Detection Engineering

Sunnyvale, CA
$136,000.00
-
$212,800.00
1 day ago

Security Engineer, Detection & Incident Response

Foster City, CA $116,500 - $164,500 2 days ago

Sunnyvale, CA $124,000 - $178,000 6 days ago

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.