Offensive Security Engineer: Build tooling & secure cloud

Palantir Technologies; Washington (District of Columbia); Hybrid; USD 145,000 - 200,000; Full time

Benefits offered by this job

Medical, dental, vision insurance

Commuter benefits

Relocation assistance

Paid time off & holidays

Job summary

Palantir Technologies seeks an Offensive Security Engineer to test internal applications and infrastructure, blending source review with runtime exploitation and to drive remediation with engineering teams.

You will help design agentic offensive security tooling and coordinate third-party engagements while reporting findings to stakeholders and translating security risks into prioritized actions.

Qualifications

• 4+ years of professional experience in offensive security, penetration testing, red teaming, or a related field.

Responsibilities

• Conduct hybrid web application penetration tests that combine source code review with runtime exploitation across Palantir's products and internal tooling.
• Perform external network penetration tests against internet-facing infrastructure, identifying exposed services, misconfigurations, and paths to obtain an initial foothold.
• Perform internal network and Active Directory security assessments, identifying privilege escalation paths, lateral movement opportunities, and misconfigurations.
• Assess the security of cloud and containerized infrastructure, including identity, network, and workload configurations.
• Collaborate with detection engineering to validate telemetry and detection coverage against real-world attack techniques uncovered during engagements.
• Scope and manage third-party pentest engagements end-to-end, critically review results, and work cross-functionally to convert findings into prioritized, actionable remediation.
• Partner with engineering to reproduce, prioritize, and verify fixes for the issues that are surfaced.
• Design and build offensive security tooling and automation tailored to Palantir's stack.
• Author clear, actionable write-ups and readouts for technical and non-technical stakeholders, translating findings into business risk and prioritized action.

Skills

Penetration testing

Python

Go

Cloud security

Active Directory

Scripting

Tools

Burp Suite

BloodHound/SharpHound

Certipy

Impacket

Responder

Pacu/ScoutSuite

Nuclei

Job description

Palantir Technologies seeks an Offensive Security Engineer to test internal applications and infrastructure, blending source review with runtime exploitation and to drive remediation with engineering teams.

You will help design agentic offensive security tooling and coordinate third-party engagements while reporting findings to stakeholders and translating security risks into prioritized actions.