Windows & AD Security Engineer - Detections & Defense

Palantir Technologies; New York (NY); Hybride; USD 145 000 - 200 000; Plein temps

Avantages offerts par ce poste

Medical benefits

Dental & vision

401k plan

PTO

Parental leave

Résumé du poste

Palantir Technologies is seeking an Information Security Engineer focused on Windows and Active Directory to own the security of Palantir’s global Windows infrastructure. You’ll run 24/7 prevention, detection, and investigation of security events across our environment, tackling sophisticated adversaries.

The role emphasizes detecting AD attacks, hardening AD, and building automation for security operations.

Qualifications

• 5+ years of hands-on security experience focused on Windows and AD.
• Proficiency in Python or PowerShell for detection development, automation, and forensic tooling.
• Active TS/SCI security clearance, or eligibility and willingness to obtain one.
• A portfolio of real work: detections you’ve written, research you’ve published, tools you’ve built, or incidents you’ve led.

Responsabilités

• Own the security posture of Palantir’s Windows and Active Directory estate — hardening, configuration standards, and ongoing validation that those standards hold.
• Reduce attack surface across AD: audit and remediate misconfigurations, legacy protocol exposure, excessive privilege, Kerberos delegation abuse, and tier model violations.
• Evaluate, deploy, and own the configuration of defensive tooling across the Windows environment: EDR, PAM, identity threat detection, and endpoint hardening controls.
• Build and maintain automation for security operations across Windows infrastructure — patching pipelines, configuration drift monitoring, access reviews, and credential hygiene.
• Partner with Identity and Infrastructure teams to drive architectural improvements: tiered administration, Protected Users, LAPS, Credential Guard, and authentication policy silos.
• Translate findings from assessments and red team exercises into durable fixes — configuration changes, architectural improvements, and policy updates that reduce recurrence.

Connaissances

Windows AD

Security

Python/PowerShell

Threat hunting

Incident response

Outils

WinDbg

Process Monitor

Process Hacker

Volatility

x64dbg

BloodHound

Impacket

Rubeus

Mimikatz

CrackMapExec

Description du poste

Palantir Technologies is seeking an Information Security Engineer focused on Windows and Active Directory to own the security of Palantir’s global Windows infrastructure. You’ll run 24/7 prevention, detection, and investigation of security events across our environment, tackling sophisticated adversaries.

The role emphasizes detecting AD attacks, hardening AD, and building automation for security operations.