Defensive Security Analyst

Works in Palantir's Information Security team as a Defensive Security Analyst, independently running the SOC systems that protect the company's people and infrastructure worldwide. The analyst builds the infrastructure and automation used to find, contain and remove threats, designs alerting and detection logic, runs enterprise-wide hunts, and examines network, host and memory artifacts during forensics and malware triage. The role also supports incident response with evidence preservation and reports findings to technical and executive audiences.

Palantir requires a TS/SCI clearance, SOC experience and scripting in PowerShell, Python or Bash; SIEM operation, AWS knowledge and penetration testing experience are valued. The role is on site in Washington, DC, and on-call duty requires being able to reach the Georgetown office within an hour.