Information Security Engineer - Infrastructure Security
Palantir is hiring an Information Security Engineer - Infrastructure Security in London, United Kingdom. Level rates it ; you can apply on Palantir.
Level's read on this job
- Little AI ●○○○ is how Level rates this cybersecurity role: aI is not part of the work.
- Level classifies it as a senior role.
- Level lists 302 other open roles at Palantir.
- The role was posted in the last few days.
AI in this role
The Role
We're looking for an Information Security Engineer who can think broadly about how infrastructure is built, attacked, defended, and improved. You may have deep experience in one area—such as endpoint security, Active Directory, Data Loss Prevention, cloud security, identity, or detection and response—but you’re motivated by solving security problems across the environment.As an Information Security Engineer focused on infrastructure security, you'll help protect Palantir's global endpoints, servers, identity systems, applications, networks, and data flows. You'll work across teams to reduce attack surface, improve defensive controls, investigate security events, and turn security findings into durable architectural and operational improvements.
This is not just a corporate security role; the adversaries we face are sophisticated. We need someone who understands both the details and the broader system: how a weakness in one part of the environment can create risk somewhere else, how controls interact, and how to build security improvements that hold up in practice.
Core Responsibilities
- Design, implement, and improve security controls across endpoints, servers, identity systems, cloud services, SaaS applications, networks, and data flows.
- Drive security posture improvements through hardening standards, configuration management, vulnerability remediation, access controls, monitoring, and ongoing validation.
- Assess security risks in new platforms, products, architectures, vendors, and services, and turn findings into practical recommendations and engineering work.
- Build and maintain automation for security operations, including configuration validation, drift monitoring, patching, access reviews, policy enforcement, alert triage, and security hygiene.
- Partner with Identity, Infrastructure, Engineering, Legal, and other Information Security teams to strengthen security architecture and address recurring risks.
- Turn insights from assessments, red team exercises, incident investigations, and operational reviews into durable fixes, such as configuration changes, architectural improvements, policy updates, and automation.
- Build expertise in one or more security domains while contributing across the broader infrastructure security lifecycle.
What We're Looking For
- Experience securing one or more major infrastructure domains, such as Windows, macOS, Linux, Active Directory, cloud platforms, SaaS applications, networking, identity systems, or enterprise endpoints.
- A broad infrastructure security mindset and curiosity about systems beyond your primary area of expertise.
- Familiarity with common infrastructure attack paths, adversary tactics, techniques, and procedures, and the controls used to prevent, detect, and contain them.
- The ability to assess complex environments and recognize how weaknesses across identity, endpoints, applications, networks, cloud services, or data flows can combine to create risk.
- Experience evaluating security tools and validating that controls are deployed effectively and continue to work as intended.
- Familiarity with infrastructure-as-code, configuration management, CI/CD, or other approaches to making security controls repeatable and scalable.
What We Value
- The ability to own projects, make progress through ambiguity, and balance competing priorities while working well with colleagues.
- Experience in complex, high-assurance, regulated, or rapidly changing environments.
- Comfort moving between strategic problem-solving and hands-on technical work.
- Strong written and verbal communication skills, including the ability to explain technical risks and work with partner teams to drive remediation.
- Contributions to security programs, tooling, automation, incident investigations, or technical research—whether public or internal.
What We Require
- 5+ years of hands-on experience in information security, infrastructure security, security engineering, security operations, or a closely related field.
- Demonstrated experience securing at least one major infrastructure or security domain, with the ability and interest to work across multiple domains.
- Active TS/SCI security clearance, or eligibility and willingness to obtain one.
- A strong sense of ownership, sound judgment, and integrity.
How we rate this
Information Security Engineer - Infrastructure Security at Palantir rates 38 out of 100 for how much of the daily work is AI. That makes it Little AI (AI Level 1 of 4). The level is about AI in the job, not seniority.
Little AI. AI is not part of the work.
- ●●●● Builds AI80 to 100
- ●●●○ Works on AI60 to 79
- ●●○○ Uses AI40 to 59
- ●○○○ Little AI0 to 39
Levels come from how often the tools, models and workflows of the role are named in the posting itself. Read the description and count the AI tools, models and workflows it names.
Prepare for this job
Built from this posting and from similar jobs on Level.
Also common in cybersecurity jobs at this level
Pay
- Typical cybersecurity job
- $162k
This posting doesn't list pay. Use the typical cybersecurity figure when pay comes up. See cybersecurity jobs
Get your CV reviewed before you apply
Send your CV and the role you want next. Your review arrives by email within 3 days.
Get new cybersecurity jobs by email
One email a week, each job rated for how much AI is in the work. No recruiter spam, unsubscribe in one click.
Free.
Similar roles
Security roles that involve little AI, at other companies.
What kind of AI work fits you?
Answer 12 practical questions in about three minutes. Get a simple profile, the work it points to, and live roles to explore next.
Find my next step