Application Security Engineer

1w1 week ago

Palantir Technologies

New York City, US · Full-time · $135,000 – $200,000

About this role

Palantir builds the world’s leading software for data-driven decisions and operations. Platforms empower partners to develop lifesaving drugs, forecast supply chain disruptions, and locate missing children. The Application Security Team enables developers to produce highly productive, agile, and secure software against advanced persistent threats.

As an Application Security Engineer, perform full-scope security reviews including whitebox, greybox, and blackbox assessments on product portfolios. Work with offensive security, engineering, and InfoSec teams to harden products. Threat model, assess risks, and implement security controls for secure-by-default designs.

Identify vulnerabilities through static/dynamic analysis, security scanning, bug bounty reports, and incident response collaboration. Own strategic security initiatives like software supply chain controls or hardware-backed GPG signing. Drive automation and massive-scale security solutions across Palantir.

This role offers wide-reaching impact, strong autonomy, and resources for significant improvements. Curiosity, tenacity, and drive to be a world-class security engineer underpin the team. Collaborate closely with product architects and engineers on mission-critical defense and intelligence applications.

Requirements

Development or software engineering experience and deep passion for information security
Self-motivated with experience solving complex problems
History and experience designing and shipping production-ready software
Strong communication and collaboration skills comfortable working closely with engineering teams
Ability to learn and apply new technologies quickly in complex deployments

Responsibilities

Perform deep architecture and security reviews on highly complex products to identify vulnerabilities
Perform full-scope security reviews of current and future product portfolio including whitebox, greybox, and blackbox assessments
Lead engineering teams in feature design, threat modeling, and security-critical code and architecture
Develop and implement automation to eliminate entire classes of weaknesses across the organization
Drive decision-making by determining tradeoffs between security and product design
Lead implementation of strategic security initiatives that improve security across Palantir
Identify and resolve security vulnerabilities via static/dynamic analysis, scanning, and bug bounty investigations