Top Cybersecurity Jobs in New York City, NY

This internship involves owning impactful information security projects, collaborating with internal teams and customers, independently solving ambiguous security problems, and delivering improvements that protect Palantir and its customers. Candidates will apply engineering and programming skills while developing practical security expertise and may need to obtain a US security clearance.

The Senior Identity Security Engineer manages identity security for Palantir's infrastructure, designing systems, threat modeling, and ensuring security in diverse environments.

The Insider Threat Detection Engineer will enhance security by automating detection workflows, investigating security events, and developing alerting strategies to identify insider risks and threats.

As an Information Security Engineer, you'll enhance the security of Windows and Active Directory, reducing attack surfaces and developing detection tools for advanced threats.

The Information Security Engineer protects Palantir's infrastructure by detecting, containing, and eradicating security threats through incident response and defensive strategies, collaborating with the security team, and utilizing their expertise in various platforms.

Manage and scale Governance, Risk, and Compliance programs across Commercial, International, and USG environments. Design and document compliance processes, coordinate audits (FedRAMP, SOC 2, ISO 27001), track remediation and evidence, map regulatory requirements to engineering workflows, maintain audit timelines and control status, and drive cross-team adoption of compliance features while managing risk registers and third-party risk.

Drive and coordinate security engineering programs end-to-end. Translate strategy into actionable tasks, manage vulnerability remediation and incident response, remove roadblocks, improve cross-team collaboration, and design scalable security processes. Support adoption of security features and ensure clear ownership and post-incident improvements.

Perform red-team-style assessments across web apps, networks, Active Directory, cloud and container environments; develop offensive tooling and LLM-driven automation; manage third-party pentests; collaborate with engineers to reproduce, prioritize, and verify fixes; and produce clear technical and non-technical write-ups and remediation plans.

Design, build, and operate secure identity infrastructure and tooling: SSO integrations, token issuance and federation, access graph and policy engine, and non-human identity management. Deploy and scale containerized services across AWS/Azure/GCP, automate governance workflows, threat-model identity designs, and partner with security and compliance teams.