Security Engineer, Attack Surface Platforms

First American

. Monitor CNAPP queues, dashboards, alerts, and platform health .

Posted 10/26/2026full-timeSanta Ana • California • United StatesJuniorMid-Level💰 $97,700 - $130,300 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cloud security practices, including CNAPP, CSPM, and vulnerability management, while effectively managing remediation processes and collaborating with cross-functional teams. Proficient in interpreting cloud configurations and assets, with a strong foundation in scripting and API integrations.

Highest-signal resume keywords

Cloud SecurityCNAPPVulnerability ManagementPython ScriptingSecurity Operations

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cloud Platform KnowledgeVulnerability TriageConfiguration Findings InterpretationRemediation TrackingSaaS Security TroubleshootingAPI ExperienceCloud Asset ManagementPolicy Behavior AnalysisOperational ReportingIncident Investigation

Soft Skills

Strong CommunicationAttention to DetailSound JudgmentOperational PrioritizationCollaboration

Tools & Technologies

CNAPP CapabilitiesCloud Account OnboardingAsset Inventory ManagementIntegration ManagementPlatform Dashboards

Certifications & Qualifications

AWS Certified Cloud PractitionerMicrosoft Certified: Azure FundamentalsGoogle Cloud Digital LeaderCCSK

Industry Keywords

Cloud SecurityCSPMCWPPCIEMSecurity Risk Assessments

Tech Stack

Tools & technologies

AWSAzureCloudPython

About the role

Key responsibilities & impact

Monitor CNAPP queues, dashboards, alerts, and platform health
Review and triage cloud security findings, identify duplicates or data quality issues, and route actionable items to owners
Triage cloud misconfigurations, vulnerabilities, exposed assets, excessive permissions, and workload or container risks
Investigate findings using cloud configurations, resource relationships, platform evidence, logs, and metadata
Document technical basis, affected resources, recommended remediation, exceptions, and compensating controls
Coordinate remediation with engineering and service teams, track service targets, validate fixes, and escalate material exposure
Administer CNAPP capabilities including access, cloud account and subscription onboarding, integrations, asset inventory, notifications, policies, and platform settings
Improve platform coverage and signal quality by tuning policies, thresholds, detections, and false-positive handling
Build and test platform enhancements such as custom policies, dashboards, reports, API utilities, workflow changes, and integrations
Prepare operational reporting on exposure trends, remediation status, platform coverage, finding quality, and service health
Contribute to security risk assessments, cloud security reviews, incident investigations, and audit evidence requests
Maintain runbooks and knowledge articles and share platform guidance with users
Partner with Cloud Engineering, Platform Engineering, DevOps, application teams, Security Operations, Security Architecture, technology groups, and platform vendors

Requirements

What you’ll need

Working knowledge of at least one major cloud platform, including core services and terminology
Understanding of CNAPP, CSPM, CWPP, CIEM, vulnerability management, and container security
Ability to interpret cloud assets, identities and permissions, network exposure, vulnerabilities, and configuration findings
Experience with security operations practices including alert/finding triage, ticket ownership, prioritization, escalation, remediation tracking, and evidence-based closure
Ability to troubleshoot SaaS security platforms, integrations, data ingestion, policy behavior, access, and reporting issues
Basic scripting or API experience in Python, PowerShell, or Bash
Strong written and verbal communication, attention to detail, sound judgment, and ability to manage multiple operational priorities
Bachelor’s degree in Computer Science, Information Technology, Engineering, or related field, or equivalent practical experience
2–3 years of experience in information security, cloud security, security operations, cloud engineering, or related technical role
Must hold an introductory cloud or cloud security certification at the time of selection: AWS Certified Cloud Practitioner, Microsoft Certified: Azure Fundamentals, Google Cloud Digital Leader, CCSK, or approved equivalent

Benefits

Comp & perks

Medical insurance
Dental insurance
Vision insurance
401k
PTO/paid sick leave
Employee stock purchase plan
Inclusive workplace culture
Equal opportunity employment