Offensive Security Engineer: Penetration Testing & Tooling

Palantir; New York (NY); Hybrid; USD 145,000 - 200,000; Full time

Job summary

Palantir is seeking an Offensive Security Engineer to test internal applications and infrastructure, chain findings into attack paths, and work with engineers to remediate issues. You will also help develop agentic offensive security tooling and coordinate third‑party pentest engagements.

A builder's instinct for automation and a deep understanding of CI/CD and infrastructure-as-code will help translate security findings into prioritized business risk.

Qualifications

• 4+ years of professional experience in offensive security, penetration testing, red teaming, or a closely related field.
• Proficiency in at least one scripting or programming language (e.g. Python, Go) sufficient to build and adapt testing tooling.
• Experience assessing security of cloud (AWS, Azure, or GCP) and containerized (Docker, Kubernetes) environments.

Responsibilities

• Conduct hybrid web application penetration tests that combine source code review with runtime exploitation across Palantir's products and internal tooling.
• Perform external network penetration tests against internet-facing infrastructure, identifying exposed services and misconfigurations.
• Perform internal network and Active Directory security assessments, identifying privilege escalation paths and lateral movement opportunities.
• Assess the security of cloud and containerized infrastructure, including identity, network, and workload configurations.
• Collaborate with detection engineering to validate telemetry and detection coverage against real-world attack techniques.
• Scope and manage third-party pentest engagements end-to-end and translate findings into prioritized remediation.
• Partner with engineering to reproduce, prioritize, and verify fixes for surfaced issues.
• Design and build offensive security tooling and automation tailored to Palantir's stack.
• Write clear, actionable write-ups and readouts for stakeholders, translating findings into business risk.

Skills

Penetration testing

Red team operations

Python

Go

Cloud security

Strong communication

Tools

Burp Suite

BloodHound/SharpHound

Certipy

Impacket

Responder

Pacu/ScoutSuite

Nuclei

Job description

Palantir is seeking an Offensive Security Engineer to test internal applications and infrastructure, chain findings into attack paths, and work with engineers to remediate issues. You will also help develop agentic offensive security tooling and coordinate third‑party pentest engagements.

A builder's instinct for automation and a deep understanding of CI/CD and infrastructure-as-code will help translate security findings into prioritized business risk.