Top Cybersecurity Jobs in New York City, NY

The Compliance Analyst supports internal and external security assessments, maintains understanding of the company’s control environment, develops technical and external compliance documentation, and advises stakeholders on controls and risk mitigation. The role manages commercial and international frameworks including SOC 2 and ISO standards, translates engineering concepts into compliance language, and autonomously advances long-term compliance objectives while exploring AI and evidence-automation tools.

This internship involves owning impactful information security projects, collaborating with internal teams and customers, independently solving ambiguous security problems, and delivering improvements that protect Palantir and its customers. Candidates will apply engineering and programming skills while developing practical security expertise and may need to obtain a US security clearance.

The Senior Identity Security Engineer manages identity security for Palantir's infrastructure, designing systems, threat modeling, and ensuring security in diverse environments.

The Insider Threat Detection Engineer will enhance security by automating detection workflows, investigating security events, and developing alerting strategies to identify insider risks and threats.

As an Information Security Engineer, you'll enhance the security of Windows and Active Directory, reducing attack surfaces and developing detection tools for advanced threats.

The Information Security Engineer protects Palantir's infrastructure by detecting, containing, and eradicating security threats through incident response and defensive strategies, collaborating with the security team, and utilizing their expertise in various platforms.

Drive and coordinate security engineering programs end-to-end. Translate strategy into actionable tasks, manage vulnerability remediation and incident response, remove roadblocks, improve cross-team collaboration, and design scalable security processes. Support adoption of security features and ensure clear ownership and post-incident improvements.

Perform red-team-style assessments across web apps, networks, Active Directory, cloud and container environments; develop offensive tooling and LLM-driven automation; manage third-party pentests; collaborate with engineers to reproduce, prioritize, and verify fixes; and produce clear technical and non-technical write-ups and remediation plans.

Design, build, and operate secure identity infrastructure and tooling: SSO integrations, token issuance and federation, access graph and policy engine, and non-human identity management. Deploy and scale containerized services across AWS/Azure/GCP, automate governance workflows, threat-model identity designs, and partner with security and compliance teams.