Application Security Engineer

Palantir builds the world’s leading software for data-driven decisions and operations. By bringing the right data to the people who need it, our platforms empower our partners to develop lifesaving drugs, forecast supply chain disruptions, locate missing children, and more. Our Product Security team works on secure-by-design and deep product partnership. We build strong relationships with other teams and help them build secure software. This includes reviewing early-stage designs and helping develop threat models.

Our products support some of the most important and impactful work in the world, including defence, intelligence, and commercial applications. We are trusted by our customers to protect their mission-critical information in the face of advanced persistent threats. The mission of the Application Security Team is to enable developers to be highly productive, agile, and produce the most secure software possible. Given the mission critical work that Palantir does, investments in application security have never been more important.

Responsibilities

• Product security reviews: Perform full-scope security reviews of our current and future product and service portfolio, including whitebox, greybox, and blackbox assessments.
• Architecture and design: Be the security subject matter expert for product architects and engineers, threat model, assess risks, and help implement security controls and mitigations.
• Strategic security initiatives: Own transformational security initiatives that impact the whole company.
• Vulnerability identification and analysis: Find new ways to identify and resolve security vulnerabilities in our products, including static and dynamic code analysis and security scanning.
• Perform deep architecture and security reviews on highly complex products to identify vulnerabilities.
• Lead engineering teams in feature design, threat modeling, and security-critical code and architecture.
• Develop and implement automation to eliminate entire classes of weaknesses across the organization.
• Drive decision-making by determining the tradeoffs between security and product design.
• Lead implementation of strategic security initiatives that improve security across Palantir.

Qualifications

• Self-motivated with experience in solving complex problems.
• History and experience designing and shipping production-ready software.
• Strong communication and collaboration skills, comfortable working closely with engineering teams.
• Ability to learn and apply new technologies quickly in complex deployments.
• Development or software engineering experience with a passion for information security.
• Experience with a modern high-level programming language (Java, Golang, Javascript, Python, etc.).
• Demonstrated experience evaluating code for vulnerabilities and weaknesses.
• Experience with complex architectures and codebases (SOA or micro-services).
• Experience utilizing CodeQL or other static code analysis platforms.
• Experience performing black-box testing of web applications.

Life at Palantir

We want every Palantirian to achieve their best outcomes, celebrating individuals’ strengths, skills, and interests. We pay attention to the needs of our community to optimise opportunities for growth and ensure many pathways to success at Palantir. Promoting health and well-being across all areas of Palantirians’ lives is one of the ways we’re investing in our community.

Workplace Flexibility

In keeping consistent with Palantir’s values and culture, we believe employees are “better together” and in-person work affords the opportunity for more creative outcomes. Therefore, we encourage employees to work from our offices to foster connectivity and innovation. Many teams offer hybrid options (WFH a day or two a week), allowing employees to strike the right trade-off for personal productivity. Based on business need, there are a few roles that allow for “Remote” work on an exceptional basis.

Application Process and Accommodations

Palantir values excellence regardless of background. We are committed to making the application and hiring process accessible to everyone and will provide reasonable accommodation for those living with a disability.

Important Notice

Please note that you will never be asked to submit a payment or share financial information to participate in our interview process. If you suspect that you've been contacted by a scammer, cease all communication and consider reporting them to the relevant authorities.