Palantir

Palantir

Offensive Security Engineer

Washington, D.C · Mid

Sponsorship not specified$145k-$200kDetected 21 days ago
PythonGoCode ReviewAWSGCPAzureCloud PlatformsDockerKubernetesCI/CDLLMsCybersecurityPenetration TestingDetection EngineeringSupply ChainCommunicationBurp Suite

Stay score

odds of building a lasting career here

64Sponsors, lottery-bound
Cap-exempt (no lottery)0
Sponsors this role100
Entry-level history0
PERM / green-card track0
Lottery odds (Level IV)94
Fits your clock70

Sponsors, but it's cap-subject — you still face the weighted lottery (~61% per draw at Level IV). Good if you win; have a cap-exempt backup on your list.

Lottery odds assume a STEM candidate.

Personalize to your clock →

Employer immigration record

from this employer's Department of Labor filings

Green-card intent detected

PALANTIR TECHNOLOGIES INC. obtained a prevailing wage determination for Software Developers in New York, NEW YORK on 2026-06-18. No matching green-card filing appears in our data yet. The determination expires in 10 days (2026-09-15), and a green-card filing must follow before then or the employer starts over.+2 more active determinations on file

Green-card follow-through: 100%

Of 8 labor certifications old enough to have been used, 0 expired without the employer filing the next step. Median time from filing to decision: 462 days.100% of their filings were for a worker who already held the job.Only certifications past the 180-day window are counted — recent ones cannot have expired yet.

Files H-1B transfers

11 transfer filings in the last year, covering 11 workers. Median labor-condition decision: 7 days. An employer that already files transfers is one that can take over an existing H-1B.

Sourced from Department of Labor LCA, PERM and prevailing-wage disclosure data. Employer matching is by name, so figures may be split across an employer's legal entities. Absence of a filing means none appears in our copy of the data, not that none exists.

Community outcomes

No reports yet — be the first to help the next applicant.

About the role

  • As an Offensive Security Engineer, you will test internal applications and infrastructure, chain findings into realistic attack paths, and work directly with the engineers responsible for the affected systems to get issues closed.
  • You will also help to coordinate third-party penetration testing engagements, scoping the work with specialized external firms, keeping assessments focused on the risks that matter, and turning their results into concrete remediation.
  • Conduct hybrid web application penetration tests that combine source code review with runtime exploitation across our products and internal tooling.

Responsibilities

  • You will help in the design of that tooling and prove it out on live assessments.
  • Scope and manage third-party pentest engagements end-to-end, critically review results, and work cross-functionally to convert findings into prioritized, actionable remediation.
  • Partner with engineering to reproduce, prioritize, and verify fixes for the issues that are surfaced.
  • Design and build offensive security tooling and automation tailored to Palantir's stack.
  • A builder's instinct: comfortable writing code to automate testing, develop proof-of-concept exploits, or to fill gaps in existing tooling.
  • Perform external network penetration tests against internet-facing infrastructure, identifying exposed services, misconfigurations, and paths to obtain an initial foothold.
  • Perform internal network and Active Directory security assessments, identifying privilege escalation paths, lateral movement opportunities, and misconfigurations.
  • Working knowledge of how modern software is built and shipped, including CI/CD pipelines and infrastructure-as-code, and an eye for how those systems become attack paths of their own.

Requirements

  • Demonstrated strength in web application penetration testing, with the ability to move fluidly between source code review and runtime testing.
  • Hands-on experience with standard offensive security tooling, including Burp Suite, BloodHound/SharpHound, Certipy, Impacket, Responder, Pacu/ScoutSuite, Nuclei, etc.
  • Working knowledge of cloud, container, and orchestration security principles, and an understanding of how common misconfigurations turn into real attack paths.
  • Proficiency in at least one scripting or programming language (e.g. Python, Go) sufficient to build and adapt your own testing tooling.
  • Excellent organizational instincts, with the ability to keep multiple streams of work moving in parallel and to track each through to verified completion.

Nice to have

  • Offensive security certifications (e.g. OSCP, OSWE), or a track record in CTF competitions or bug bounty programs, are a plus but not required.
  • Willingness and eligibility to obtain a U.S. security clearance preferred.

Skills

  • Assess the security of cloud and containerized infrastructure, including identity, network, and workload configurations.
  • Demonstrated experience assessing the security of cloud (AWS, Azure, or GCP) and containerized (Docker, Kubernetes) environments.

Compensation

  • Salary The estimated salary range for this position is estimated to be $145,000 - $200,000/year.

Benefits

  • Collaborate with detection engineering to validate telemetry and detection coverage against real-world attack techniques uncovered during engagements.

Company info

  • We are proud to be an Equal Opportunity Employer for all, including but not limited to Veterans and those with disabilities.
  • A growing part of the team's work is also developing agentic offensive security tooling: LLM-driven systems that encode operator tradecraft and apply it continuously.

Visa & Work Authorization

  • security clearance preferred
Apply directly at Palantir →Create a free account for alerts like thisView Palantir immigration profile

This listing is sourced directly from Palantir's careers page and normalized into a canonical job model.