National AI Awards 2025Discover AI's trailblazers! Join us to celebrate innovation and nominate industry leaders.

Nominate & Attend

Offensive Security Engineer

Palantir Technologies
London
2 months ago
Applications closed

Related Jobs

View all jobs

Security and Information Security Architect

Security and Information Security Architect

Security and Information Security Architect

Offensive Security Specialist - Penetration Tester

Information Security Engineer

Senior Red Team Operator

A World-Changing CompanyPalantir builds the world’s leading software for data-driven decisions and operations. By bringing the right data to the people who need it, our platforms empower our partners to develop lifesaving drugs, forecast supply chain disruptions, locate missing children, and more.The RoleOur products support some of the most important and impactful work in the world, including defence, intelligence, and commercial applications. We are trusted by our customers to protect their mission-critical information in the face of advanced persistent threats. Our offensive security engineers emulate these real-world threats and provide critical signal on attack vectors to help improve our security posture. This role will be hands-on and requires a deep understanding of micro-service architecture, multi-tenancy vulnerabilities, cloud security, and web application security.In this role you’ll dive deep into the security of our products and more:•Conduct security assessments.You’ll learn how our products work at the most technical level and then try to break them. This includes everything in our current and future product and service portfolio from Apollo to Foundry. You’ll document security findings and work with AppSec and product engineers to develop mitigations. •Build offensive testing tooling and automation.Scale offensive security testing by developing tooling and automation. Repeatable security testing is ensures that mitigations and controls remain consistent and effective in the face of high velocity development.•Define security metrics.Data is at the heart of Palantir and its important for our security engineers to use data to drive their decisions. As an offensive security engineer you’ll define, report, and use risk metrics to conduct security assessments.•Collaborate with other Palantir security teams.You’ll work with our incident response team to improve detection and response capabilities across our products and infrastructure. There will also be opportunities to work with our Protect team to identify vulnerabilities in our product infrastructure and help define relevant security controls.•Help defend a unique threat environment.Palantir offers an unparalleled opportunity to ply your craft on the bleeding edge of technology, software, and AI. With a wide range of customers and global impact our software is under constant threat from advanced persistent threats (APT). You get to think like an attacker and provide outside-the-box thinking on how to misuse our products. 

Core Responsibilities

Perform offensive security assessments on highly complex products to identify vulnerabilities Perform offensive security assessments within our software supply chain Collaborate with engineering teams on security controls, threat modeling, and security-critical code and architecture. Develop and implement offensive tooling and automation to scale your capabilities and knowledge Operate as an offensive security expert for our products to inform risk assessments during product design Enable other security teams to focus on defending and improving critical areas of our product

What We Value

Self motivated, experience in solving complex problems Experience performing offensive security testing on software supply chains including CI/CD systems, source control, and dependency based attack vectors Participation in bug bounties, CTFs, vulnerability research, open source tool development, and security presentations Ability to learn and apply new technologies quickly and in complex deployments Experience testing AI related vulnerabilities and architectures. Willingness or eligibility to obtain a UK security clearance

What We Require

5+ years of experience performing offensive security testing on web applications, cloud environments, and highly scaled architectures ( SOA or micro-services) Experience testing and exploiting a variety of services and bug types including authentication and authorisation, multi-tenancy, and cloud environment misconfigurations Ability to write code to automate aspects of offensive testing, familiarity with Python, Java, Go are preferred Ability to evaluate code for vulnerabilities and weaknesses Strong communication and collaboration skills, comfortableness working closely with engineering and defensive security teams

Life at PalantirWe want every Palantirian to achieve their best outcomes, that’s why we celebrate individuals’ strengths, skills, and interests, from your first interview to your longterm growth, rather than rely on traditional career ladders. Paying attention to the needs of our community enables us to optimize our opportunities to grow and helps ensure many pathways to success at Palantir. Promoting health and well-being across all areas of Palantirians’ lives is just one of the ways we’re investing in our community. Learn more at and note that our offerings may vary by region.In keeping consistent with Palantir’s values and culture, we believe employees are “better together” and in-person work affords the opportunity for more creative outcomes. Therefore, we encourage employees to work from our offices to foster connectivity and innovation. Many teams do offer hybrid options (WFH a day or two a week), allowing our employees to strike the right trade-off for their personal productivity. Based on business need, there are a few roles that allow for “Remote” work on an exceptional basis. If you are applying for one of these roles, you must work from the city and or country in which you are employed. If the posting is specified as Onsite, you are required to work from an office.If you want to empower the world's most important institutions, you belong here. Palantir values excellence regardless of background. We are committed to making the application and hiring process accessible to everyone and will provide a reasonable accommodation for those living with a disability. If you need an accommodation for the application or hiring process, please and let us know how we can help.

National AI Awards 2025

Subscribe to Future Tech Insights for the latest jobs & insights, direct to your inbox.

By subscribing, you agree to our privacy policy and terms of service.

Industry Insights

Discover insightful articles, industry insights, expert tips, and curated resources.

Cyber Security Jobs Employer Hotlist 2025: 50 UK Companies Actively Hiring Right Now

Bookmark this guide—refreshed every quarter—so you always know who’s really expanding their cyber security teams. Ransomware payouts broke records in 2024, the UK’s new Cyber Security Bill imposed mandatory breach disclosure, and the National Cyber Force’s move to Samlesbury has super‑charged the northern skills market. Result? Demand for security architects, SOC analysts, penetration testers, cloud‑security engineers, threat hunters & GRC specialists is at an all‑time high in 2025. Below you’ll find 50 organisations that have posted UK‑based cyber security vacancies or announced head‑count growth during the past eight weeks. They’re organised into five quick‑scan categories. For every employer you’ll see: Main UK hub Example live or recent vacancy Why it’s worth a look (tech stack, culture, mission) Search any company on CyberSecurityJobs.tech to view current ads, or set a free alert so fresh openings land straight in your inbox.

Return-to-Work Pathways: Relaunch Your Cyber Security Career with Returnships, Flexible & Hybrid Roles

Re-entering the workforce after a career break can feel especially challenging in a fast-moving field like cyber security. Whether you stepped away for parenting, caregiving or another life chapter, the UK’s cyber security sector now offers a range of return-to-work pathways—from structured returnships to flexible and hybrid roles. These programmes value the transferable skills and resilience you’ve developed during your break, pairing you with mentorship, upskilling opportunities and supportive networks to ease your transition back into cyber security. In this article, tailored for parents and carers, you’ll discover how to: Understand the growing demand for cyber security talent in the UK Translate your organisational, communication and problem-solving skills into cyber security roles Tackle common re-entry challenges with practical solutions Refresh your technical knowledge through targeted learning Access returnship and re-entry programmes specific to cyber security Find roles that accommodate family commitments—whether hybrid, flexible or full-time Balance your career relaunch with caring responsibilities Master applications, interviews and networking in cyber security Draw inspiration from real returner success stories Whether you aim to return as an analyst, penetration tester, security engineer or compliance specialist, this guide will equip you with the steps and resources to reignite your cyber security career.

LinkedIn Profile Checklist for Cybersecurity Jobs: 10 Tweaks to Supercharge Recruiter Engagement

In the ever-evolving realm of cybersecurity, having a LinkedIn profile that reflects both your technical prowess and threat-hunting acumen is vital. Organisations are on the lookout for professionals skilled in penetration testing, incident response, security architecture and compliance. With hiring managers scanning dozens of profiles daily, your profile needs to not just rank in searches but convey your expertise in safeguarding digital assets. This step-by-step LinkedIn for cybersecurity jobs checklist offers ten practical tweaks to supercharge recruiter engagement. Whether you’re an aspiring security analyst, a seasoned penetration tester or a chief information security officer aiming for board-level roles, these actionable optimisations will sharpen your LinkedIn presence and position you as a top infosec candidate.