Senior Windows & AD Security Engineer – Detection & Hardening

Palantir Technologies; New York (NY); Hybrid; USD 145,000 - 200,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

Commuter benefits

Paid time off

10 paid holidays

401k plan

Life insurance

Disability insurance

Job summary

Palantir Technologies in the United States seeks an Information Security Engineer focused on Windows and Active Directory. You will own the security of Palantir’s global Windows infrastructure, leading 24/7 prevention, detection, and investigation of security events across our environment.

The role requires deep AD knowledge, Windows internals, and hands-on detection development, incident response, and adversary simulation.

Qualifications

• 5+ years of hands-on security experience focusing on Windows environments.
• Proficiency with Python or PowerShell for detection development and automation.
• Active TS/SCI security clearance or eligibility to obtain one.
• Portfolio of detections, research, tools, or incidents led.

Responsibilities

• Own the security posture of Palantir’s Windows and Active Directory estate, including hardening and configuration standards.
• Reduce AD attack surface by auditing misconfigurations and restricting privilege.
• Evaluate and deploy defensive tooling (EDR, PAM, identity threat detection) across Windows.
• Build automation for security operations: patching pipelines, drift monitoring, and credential hygiene.
• Collaborate with Identity and Infrastructure teams to improve authentication and policy silos.
• Translate assessment findings into durable fixes and architectural improvements.

Skills

Windows security

Active Directory

Python/PowerShell

Detection engineering

Incident response

Forensics (disk/memory/network)

Tools

BloodHound

Impacket

Rubeus

Mimikatz

CrackMapExec

WinDbg

Process Monitor

Volatility

x64dbg

Job description

Palantir Technologies in the United States seeks an Information Security Engineer focused on Windows and Active Directory. You will own the security of Palantir’s global Windows infrastructure, leading 24/7 prevention, detection, and investigation of security events across our environment.

The role requires deep AD knowledge, Windows internals, and hands-on detection development, incident response, and adversary simulation.